Dinstar SBC3000 User Manual
  1. Manuals
  2. Brands
  3. Dinstar Manuals
  4. Controller
  5. SBC3000
  6. User manual

Dinstar SBC3000 User Manual

Session border controller
Hide thumbs Also See for SBC3000:
Table of Contents

Advertisement

Quick Links

Download this manual
SBC3000 Session Border Controller
User Manual V1.0
Shenzhen Dinstar Co., Ltd.
Address: 9th Floor, Guoxing Building, Changxing Road, Nanshan District, Shenzhen, China
Postal Code: 518052
Telephone: +86 755 61919966
Fax: +86 755 26456659
Emails: sales@dinstar.com, support@dinstar.com
Website: www.dinstar.com

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SBC3000 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Dinstar SBC3000

Summary of Contents for Dinstar SBC3000

  • Page 1 SBC3000 Session Border Controller User Manual V1.0 Shenzhen Dinstar Co., Ltd. Address: 9th Floor, Guoxing Building, Changxing Road, Nanshan District, Shenzhen, China Postal Code: 518052 Telephone: +86 755 61919966 Fax: +86 755 26456659 Emails: sales@dinstar.com, support@dinstar.com Website: www.dinstar.com...
  • Page 2 Preface Welcome Thanks for choosing SBC3000 Session Border Controller! We hope you will make full use of this rich-feature device. Contact us if you need any technical support: 86-755-26456110/112. About This Manual This manual gives introduction to the SBC3000 device, and provides information about how to install, configure or use it.

  • Page 4: Table Of Contents

    Attentions for Installation ......................7 Preparations about Installation Site ....................7 Installation Tools ..........................8 Unpacking ...........................8 2.2 Installtion of SBC3000 .........................8 Put SBC3000 into Shelf .......................8 Connect Ground Cable to MTG3000 ....................8 Connect SBC3000 to Network .....................9 How to make RJ45 Network Cable ....................9 Troubleshooting about Network Connection ................
  • Page 5 3.6 System ..............................53 Device Name ..........................53 Web Configuration ........................53 Network ............................. 54 Port Mapping ..........................55 Static Route ..........................56 User Manager ..........................57 Date & Time ..........................59 Upgrade ............................. 60 SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...
  • Page 6 Backup & Restore ........................60 License ............................ 61 Certificate ..........................61 3.7 Maintenance ............................62 Login Log ..........................62 Operation Log ..........................62 Security Log ..........................63 Log Management ........................63 Tools ............................63 4 Abbreviation ........................65 SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 7: Production Introduction

    It is able to process up to 2000 concurrent SIP sessions and transcode 1500 concurrent calls. Meanwhile, it allows encrypted sessions via TLS and SRTP. Apart from traditional codecs like G.729, G.723, G.711 and G.726, SBC3000 also supports the transcoding of iLBC, AMR and OPUS.

  • Page 8: Product Appearance

    The network port is not connected, or is GE （ 0-3 ） connected abnormally /Admin Network port works at 1000Mbps Speed Indicator (Yellow) Network port works at 10/100Mbps 1.5 Functions and Featurres Key Features Support up to 10000 SIP registrations  SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 9: Physical Interfaces

    E1/T1 Ports (to do):  2* E1/T1, RJ48C 1* SIM Card Slot (to do)  LTE Uplink ( to do)  Capabilities Concurrent Calls  Support 2000 SIP sessions at maximum Transcoding  Supports 1500 transcoding calls SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 10: Voip

    Multiple Soft-switches supported  QoS (ToS, DSCP)  NAT Traversal  Voice Codecs: G.711a/μ，G.723， G.729A/B，iLBC，G.726， AMR，OPUS  RTP Transcoding  Fax: T.38 and Pass-through  No RTP detection  One-way audio detection  RTP/RTCP  SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 11: Security

    Call routing based on SIP method  Call routing based on endpoint  Caller/called number manipulation  Maintenance Web-based GUI for Configurations  Configurations Restore/Backup  HTTP Firmware Upgrade  CDR Report and CDR Export  SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 12: Environmental

    Operating Temperature: 0 ℃ ~ 45 ℃  Storage Temperature: -20 ℃ ~80 ℃  Humidity: 10%-90% Non-Condensing  Dimensions (W/D/H): 436× 320× 44.5mm (1U)  Unit Weight: 4.5 kg  Compliance: CE, FCC  SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 13: Installation

    0 ℃ ~ 45 ℃; Ensure the equipment room is well-ventilated and clean;  Power supply of SBC3000 should be 100 ~ 240V AC, and its socket is a three-pin socket which should be  grounded well; It’s suggested that personnel who has experience or who has received related training be responsible for ...

  • Page 14: Installation Tools

    Put SBC3000 into Shelf 1. Put the SBC3000 device on the shelf or cabinet horizontally, or fix the mounting ears s of SBC3000 on the cabinet by using screws (before that, you need to use screws to fix mounting ears on the left and the right of SBC3000 repectively).

  • Page 15: Connect Sbc3000 To Network

    SBC3000 has two network ports on each MCU (Main Control Unit), namely GE1 and GE0. By default, the GE1 port is used to log in the SBC3000 device. Both GE1 and GE0 can be used to carry out management on SBC3000, but only GE1 is put in use generally. How to make RJ45 Network Cable Step1.

  • Page 16: Troubleshooting About Network Connection

    Step6.Test the usability of the network cable. Troubleshooting about Network Connection When the SBC3000 device has been connected to gigabit Ethernet, but the SPEED and LINK indicators on the front panel of the device are still dull, it can be concluded that network connection fails.

  • Page 17: Configurations On Web Interface

    First Use At the first time that the SBC3000 device is put in use, please connect the device’s GE1 port to a PC by using a network cable, and then modify the IP address of the PC to make it at the same network segment with of the default IP address of the GE1 port.

  • Page 18: Log In Web Interface

    Note: At the first time that the SBC3000 device is used, only the GE1 port is allowed to visit the Web interface (the GE0 port is disabled). If you want to connect the SBC3000 device through GE0, please connect the GE1 port to a PC and log into the Web interface of the device, and then enable GE0 on the SecurityAccess Control page.

  • Page 19: Introduction To Web Interface

    If you forget the IP address after modification and cannot log in the Web interface, please use a serial cable to connect the Console port of SBC3000 with a PC. Enter the ‘en’ mode and input ‘show interface’ to query the IP address.

  • Page 20: Configuration Flows

    3 Configurations on Web Interface To add configurations To edit/modify configurations To delete configurations 3.3 Configuration Flows The following is the general configuration flows of SBC3000: Log in Web Interface Configure IP Address of GE1/GE0 Configure from top to buttom based...
  • Page 21 Figure 3-5 System Status Table 3-2 Calls Statistics CPS (Calls Per Second) The number of new calls going through SBC3000 every second at current time Peak CPS The peak CPS (calls per second) since SBC3000 is booted up Current Calls The number of on-going calls at current time Max.

  • Page 22: Access Network Status

    NTP. Access Network Status Terminal users are registered to SBC3000 through access network. The status of access network is always “true”, which means the access network is normal and available. On the OverviewAccess Network Status page, detailed information about access network, including the status, name, CPS(Calls Per Second), number of registered users, ASR(Answered Success Ratio), number of calls that are being transcoded, number of current calls as well as number of total calls, are shown.

  • Page 23: Access Trunk Status

    The total number of legal calls since the device is booted up Note: Calls are grouped into inbound calls and outbound calls. Inbound calls go from terminal users to SBC3000, while outbound calls are exactly the opposite. Inbound calls and outbound calls have their own statistics of ASR, number of transcoded calls, number of current calls and number of total calls.

  • Page 24: Core Trunk Status

    Calls are grouped into inbound calls and outbound calls. Inbound calls go from the terminals in access network to SBC3000, while outbound calls are exactly the opposite. Inbound calls and outbound calls have their own statistics of ASR, number of transcoded calls, number of current calls and number of total calls.

  • Page 25: Calls Status

    As for ASR, if the invite message of a call is successfully responded, we consider the call as a successful/answered call. Calls are grouped into inbound calls and outbound calls. Inbound calls go from core network to SBC3000, while outbound calls are exactly the opposite. Inbound calls and outbound calls have their own statistics of ASR, number of calls that are being transcoded, number of current calls and number of total calls.

  • Page 26: Register Status

    The number of RTP messages that received or sent. The statistics is collected every five seconds Peer IP The peer IP address and peer RTP port Register Status On the Overview Register Status page, the registration statuses of terminal users on SBC3000 are displayed. SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 27: Attack List

    IP Addr./NAT (destination): the IP address and NAT address of core network’s SIP trunk Addr./NAT Attack List On the Overview Attack List page, the source, IP address and interface of attacks to SBC3000 are shown. Figure 3-11 Attack List Table 3-11 Attack List...

  • Page 28: Service

    On the Service  Media Detection page, you can choose to enable/disable ‘Use called to match sessions’ and ‘RTP Detection’. If ‘RTP Detection’ is enabled, the SBC3000 device will monitor the RTP packets of each call and will disconnect the call after it finds that no RTP packets are sent or received during the detection time.

  • Page 29: Number Profile

    Number profile does not support ‘Regular Expression’ currently. Click , and you can add a number profile. Figure 3-14 Add Number Profile SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 30: Time Profile

    The description of the time profile Configure the starting date and ending date of a period; Date You are allowed to configure multiple periods Workday Choose one or more working days (from Monday to Sunday) SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 31: Rate Limit

    SIP trunk or a core SIP trunk, the SBC3000 device will refuse the calls and registration requests from this number. SBC3000 Session Border Controller...
  • Page 32 3 Configurations on Web Interface If a number is put on whitelist and the white list is adopted, the SBC3000 device will accept the calls and registration requests from this number. Figure 3-17 Blacklist Figure 3-18 Whitelist Table 3-16 Blacklist & Whitelist The name of the blacklist.

  • Page 33: Codec Profile

    3 Configurations on Web Interface Codec Profile SBC3000 supports such codecs as G729, G723, PCMU, PCMA, ILBC_13K, ILBC_15K, OPUS and AMR. You can group these codecs and adjust their priority according to your needs. Figure 3-19 Edit Codec Profile Table 3-17 Codec Group The name of the codec group.

  • Page 34: Number Manipulation

    The prefix that will be deleted after it matches a caller/callee number. For example, if the prefix is set as 678 and the caller number is 67890000, then the caller number will be changed into Delete Prefix 9000; The prefix supports regular expression; SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 35: Number Pool

    Note: During number manipulation, ‘Delete Prefix’ and ‘Delete Suffix’ are carried out first, followed by ‘Add Prefix’ and ‘Add Suffix’. If ‘Condition’ is also set, SBC3000 will match the condition based on the result of the abovementioned rules. If a number manipulation rule is used on the Service Access Network page, the Service  Access SIP Trunk page or the Service ...

  • Page 36: Sip Header Manipulation

    When the SIP headers of the messages related to calls passing through access network, access SIP trunk and core SIP trunk are not consistent with those required, you need to set rules to manipulate original SIP headers. SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...
  • Page 37 Source ID: the original content of SIP message, it can be any parameter included in SIP message. Match: equal  when the source ID is equal to the set value, the operation rule is activate. SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 38: Sip Header Passthrough

    Table 3-21 SIP Header Pass The name of the ‘SIP header passthrough’ profile. It cannot be modified after the ‘SIP Name header pass’ profile has been added successfully The description of the ‘SIP header passthrough’ profile Description SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 39: Access Network

    Record-Route, Refer-To, Referred-By, Auto-Defined。 Access Network On the Service Access Network page, you can configure the parameters of access network, which will be used when terminal users are registered to softswitch through the SBC3000 device. SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...
  • Page 40 Select a transport protocol for the access network. It can be UDP, TCP or TLS Protocol The access network’s SIP listening port on the Ethernet interface of SBC3000 SIP Port Select a network protocol for the access network. It can be IPv4 or IPv6.
  • Page 41 The QoS tag of meida messages Near-end NAT defaults to disabled. If it is enabled, the contact IP address contained in SIP messages sent out by SBC3000 will be turned into the outbound IP address of public Near-end NAT network.
  • Page 42 If ‘Require’ is selected, the callee side of a call passing through the access network also needs to support session timer. Configure the duration of the session. During the duration, SBC3000 will send ‘reinvite’ Session Expire messages to keep activating the session.

  • Page 43: Access Sip Trunk

    By default, the INVITE request, REGISTER request and SESSION DISCONNECT request are accepted. Access SIP Trunk Access SIP trunk can realize the connection between access network and SBC3000. On the Service Access SIP Trunk page, you can configure the parameters of access SIP trunk. SBC3000 Session Border Controller...
  • Page 44 Name been added successfully Description The description of the access SIP trunk The SBC3000 device’s Ethernet interface configured to connect the access SIP trunk. It Interface can be eth0, eth1, eth2, eth3 or VLAN Transport Select a transport protocol for the access SIP trunk. It can be UDP, TCP or TLS The access SIP trunk’s SIP listening port on the Ethernet interface of SBC3000...
  • Page 45 3 Configurations on Web Interface Near-end NAT defaults to disabled. If it is enabled, the contact IP address contained in SIP messages sent out by SBC3000 will be turned into the outbound IP address of public Near-end NAT network. If NAT is enabled, you need to fill in the outbound IP address of public network.
  • Page 46 If ‘Require’ is selected, the callee side of a call passing through the access SIP trunk also needs to support session timer. Configure the duration of the session. During the duration, SBC3000 will send ‘reinvite’ Session Expires messages to keep activating the session.

  • Page 47: Core Sip Trunk

    Core SIP Trunk Core SIP trunk can realize the connection between SBC3000 and the core network. On the Service Core SIP Trunk page, you can configure the parameters of core SIP trunk. SBC3000 Session Border Controller...
  • Page 48 3 Configurations on Web Interface SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...
  • Page 49 The QoS tag of media messages Near-end NAT defaults to disabled. If it is enabled, the contact IP address contained in SIP messages sent out by SBC3000 will be turned into the outbound IP address of public Near-end NAT network.
  • Page 50 3 Configurations on Web Interface There are three DTMF modes, including SIP Info, Inband, RFC2833; If the DTMF mode of an core SIP trunk differs from that of access network, SBC3000 will convert it through DSP Select a SIP header manipulation rule for inbound calls of the core SIP trunk. If a call...
  • Page 51 If ‘Require’ is selected, the callee side of a call passing through the core SIP trunk also needs to support session timer. Configure the duration of the session. During the duration, SBC3000 will send ‘reinvite’ Session Expires messages to keep activating the session.

  • Page 52: Routing Profile

    Backup: if the status of the first SIP trunk is ‘True’, the call will be always routed by the first SIP trunk. If the status of the first SIP trunk is ‘False’, the call will be routed by the next available SIP trunk. SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...
  • Page 53 The number profile set for matching the route. If the caller number or the called number of a call matches with a number in this profile, the call will be routed by the route. This Number Profile parameter is optional to fill in. Make reference to 3.4.3 . SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...
  • Page 54 Caller number or called number can also be manipulated when a call comes into an access network, access SIP trunk or core SIP trunk. In this section, number is manipulated after a call has finished choosing a route. SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 55: Security

    In the Security section, you can configure the system security strategies, anti-attack strategies and access control strategies. System System security is mainly used to prevent SBC3000 from being attacked by various DOS/DDOS floods, so as to ensure stable running of the device. Figure 3-29 System Security Table 3-27 System Security If ‘Attack Log’...

  • Page 56: Access Control

    If you select the checkbox on the right of GE0, it means the GE0 port.is allowed to access Web Server the Web interface of SBC3000. By default, GE1 can be used to log into the Web interface of SBC3000 directly, while GE0 is not allowed to access the Web interface. SBC3000 Session Border Controller...

  • Page 57: Security Policy

    3 Configurations on Web Interface The SSH port of SBC3000 defaults to 22. If you select the checkbox on the right of GE0, it means the GE0 port.is allowed to access the SSH of SBC3000. By default, GE1 can be used to log into SSH, while GE0 is not allowed to access SSH.
  • Page 58 3 Configurations on Web Interface Local port: when the packet traffic received by local port exceeds the configured traffic threshold (KBPS) or the CPU usage exceeds the configured threshold, SBC3000 will execute the preset action. The CPU usage rate CPU Usage If this parameter is null, it means CPU usage is not a condition for triggering security strategy.

  • Page 59: System

    & password as well as time zone & current time. You can also upgrade software versions, backup or restore configuration data, and update license and certificate. Device Name On the System  System Management page, you can configure the name of the SBC3000 device. Figure 3-35 Device Name Web Configuration...

  • Page 60: Network

    VLAN on the page. Figure 3-37 Network Port Figure 3-38 Modify Port Information Click to add a VLAN and click to modify the information of each network port or VLAN, while click to delete a VLAN. SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 61: Port Mapping

    Port Mapping To ensure the security of the LAN (local-area network), SBC3000 will reject the connection request from the wide- area network (WAN). Port mapping allows a client in the wide-area network to visit the SBC3000 device in the local-area network.

  • Page 62: Static Route

    The interface of the client in the wide-area network, which is to visit the Interface SBC3000 device in local-area network1 Remote Port The port of the client in the wide-area network, which is to visit the SBC3000 Number device in local-area network Remote IP...

  • Page 63: User Manager

    User Manager On the System  User Manager  Password page, you can modify administrator’s password for logging in the SBC3000 device. Factory defaults for administrator’s username and password are ‘admin’ and ‘admin@123#’ which are also used to log in SSH.
  • Page 64 Web interface, specify their roles and allocate permissions to them. Figure 3-43 Add User and Assign Permissions Table 3-33 User List Username The name of the user, which is used to log in the SBC3000 device SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 65: Date & Time

    Time Zone device is placed. If the current time of SBC3000 is wrong and the device fails to synchronize with a Synchronize Time NTP server, you can synchronize the current time to that of the PC which is used to log in the SBC3000.

  • Page 66: Upgrade

    3 Configurations on Web Interface Upgrade On the System  Upgrade interface, you can upgrade the SBC3000 to a new version. But you need to restart the device for the change to take effect after executing upgrade. Figure 3-45 Software Upgrade The version file used for upgrade is generally named as ‘2.

  • Page 67: License

    On the System  License page, the license information, including license beginning time, license expiry time, maximum concurrent calls, maximum transcoded sessions, maximum registered users, RPS ( registrations per second) and CPS( calls per second), is displayed. The SBC3000 device will not accept registrations and calls after the license expires.

  • Page 68: Maintenance

    3.7 Maintenance Login Log The logs tracing the logins of the SBC3000 device can be viewed on the Maintenance  Login Log page. You are allowed to set query criteria to view the logs that you want. Figure 3-50 Login Log Operation Log The logs tracing the operations carried out on the Web interface can be queried on the Maintenance ...

  • Page 69: Security Log

    Figure 3-53 Log Management Tools On the Maintenance  Tools page, you can use three network utilities including Ping, Traceroute and Nslookup to diagnose the network, and can capture data packages of the available network ports. [PING] SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...
  • Page 70 On the following interface, you can capture data packages of the available network ports. You can also set source IP, source port, destination IP or destination port to capture the packages that you want. SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

  • Page 71: Abbreviation

    4 Abbreviation Abbreviation SBC: （Session Border Controller） SIP: （Session Initiation Protocol） DTMF: （Dual Tone Multi Frequency） NAT： （Network Address Translation） VLAN： （Virtual Local Area Network） SBC3000 Session Border Controller Copyright©2011-2018 Dinstar...

Table of Contents