Dinstar SBC1000 User Manual
  1. Manuals
  2. Brands
  3. Dinstar Manuals
  4. Controller
  5. SBC1000
  6. User manual
Dinstar SBC1000 User Manual

Dinstar SBC1000 User Manual

Session border controller
Hide thumbs Also See for SBC1000:
Table of Contents

Advertisement

Quick Links

Download this manual
SBC1000 Session Border Controller
User Manual V1.0
Shenzhen Dinstar Co., Ltd.
Address: Floor 18, Building 7A, Vanke Cloud City Phase 1, Xingke 1st Street, Xili Sub-district,
Nanshan District, Shenzhen.
Postal Code: 518052
Telephone: +86 755 61919966
Fax: +86 755 2645 6659
Email：sales @dinstar.com
Website：www.dinstar.com

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SBC1000 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Dinstar SBC1000

Summary of Contents for Dinstar SBC1000

  • Page 1 SBC1000 Session Border Controller User Manual V1.0 Shenzhen Dinstar Co., Ltd. Address: Floor 18, Building 7A, Vanke Cloud City Phase 1, Xingke 1st Street, Xili Sub-district, Nanshan District, Shenzhen. Postal Code: 518052 Telephone: +86 755 61919966 Fax: +86 755 2645 6659 Email：sales @dinstar.com...
  • Page 2 Preface Welcome Thanks for choosing SBC1000-X Session Border Controller! We hope you will make full use of this rich-feature device. Contact us if you need any technical support: 0755- 61919966. About This Manual This manual gives introduction to the SBC1000-X device, and provides information about how to install, configure or use it.

  • Page 4: Table Of Contents

    2.1.3 Installation Tools......................10 2.1.4 Unpacking........................10 2.2 Installation of SBC1000-X....................10 2.2.1 Put SBC1000-X into Shelf..................10 2.2.2 Connect SBC1000-X to Network................10 2.2.3 How to make RJ45 Network Cable................11 2.2.4 Connect SBC1000-X to Network................12 2.2.5 Troubleshooting about Network Connection..............12 3 Web platform......................13 3.1 How to Log in Web Interface....................13...
  • Page 5 3.6.10 Double-device Hot Stand by..................67 3.6.11 License........................68 3.6.12 Certificate........................68 3.7 Maintenance......................... 68 3.7.1 Login Log........................68 3.7.2 Operation Log......................69 3.7.3 Security Log........................69 3.7.4 Log Management......................69 3.7.5 Tools..........................70 4 Abbreviation......................71 5 Command Lines....................72 SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 6: Production Introduction

    It is able to process up to 500 concurrent SIP sessions and transcode 200 concurrent calls. Meanwhile, it allows encrypted sessions via TLS and SRTP. Apart from traditional codecs like G.729, G.723, G.711 and G.726, SBC1000-X also supports the transcoding of iLBC, AMR and OPUS.

  • Page 7: Product Appearance

    Definition Status Description There is no power supply or power supply is abnormal Power Indicator The device is powered on The device is initialized successfully Running Indicator Slow Flashing （1s） and is running normally SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 8: Functions And Features

    Master/slave MCU for backup, dual power supply for back up, double-device  hot standby Hierarchical management of users, import & export of remote upgrade and  configuration data User-friendly web interface, multiple management ways  Support SIP protocols including UDP, TCP and TLS  SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...
  • Page 9 SIP Trunks  128 SIP trunks at maximum VoIP  SIP 2.0 compliant, UDP, TCP, TLS,  SIP trunk (Peer to peer)  SIP trunk (Access)  SIP registrations  B2BUA (Back-to-Back User Agent)  SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...
  • Page 10 Prevention of DoS and DDoS attacks  Control of access policies  Policy-based anti-attacks  Call Security with TLS/SRTP  White List & Black List  Access Rule List  Embedded VoIP Firewall  SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...
  • Page 11  Operating Temperature: 0 ℃ ~ 45 ℃  Storage Temperature: -20 ℃ ~80 ℃  Humidity: 10%-90% Non-Condensing  Dimensions (W/D/H): 437×300×44mm (1U)  Unit Weight: 4.5 kg  Compliance: CE, FCC  SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 12: About Personal Privacy

    Production Introduction 1.6 About personal privacy SBC1000-X does not store and use personal information in any way. The content of Sources Purpose of using Data validity Method of Application Data Type personal data and and retention data scenarios items information...
  • Page 13 Not involved involved involved involved situation Private browsing Not involved Not involved Not involved involved involved involved history History Usage habits and frequency Not involved Not involved Not involved involved involved involved of application SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 14: Installation

    45 ℃; Ensure the equipment room is well-ventilated and clean; Power supply of SBC1000-X should be 100 ~ 240V AC, and its socket is a three-pin socket which should be grounded well; It’s suggested that personnel who has experience or who has received related training be responsible for installing and maintaining SBC1000-X;...

  • Page 15: Installation Tools

    Installation Ensure the socket of SBC1000-X is a three-pin socket and power supply is grounded well. 2.1.3 Installation Tools Screwdriver ESD wrist strap Ethernet cables, power wires, telephone wires Hub, telephone set, fax, and small PBX Terminal (can be a PC which is equipped with hyperterminal simulation software) 2.1.4 Unpacking...

  • Page 16: How To Make Rj45 Network Cable

    Step2: Put the wires into the PINs of a RJ45 joint according to the abovementioned wire sequence of EIA/TIA 568A, and then use a wire crimper to crimp the RJ45 joint. Step2: Test the usability of the network cable. SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 17: Connect Sbc1000-X To Network

    Installation 2.2.4 Connect SBC1000-X to Network SBC1000-X has five network ports, namely the gigabit network ports for services (from GE0 to GE3) and the gigabit network port for management (Admin). It is advised to connect GE0/GE1/GE2/GE3 to the IP network.

  • Page 18: Web Platform

    First Use At the first time that the SBC1000-X device is put in use, please connect the device’s Admin port to a PC by using a network cable, and then modify the IP address of the PC to make it at the same network segment with of the default IP address of the Admin port.

  • Page 19: Log In Web Interface

    Web platform Note: At the first time that the SBC1000-X device is used, only the Admin port is allowed to visit the Web interface (other network ports are disabled). If you want to connect the SBC1000-X device through other network ports, please connect the Admin port to a PC...

  • Page 20: Introduction To Web Interface

    If you forget the IP address after modification and cannot log in the Web interface, please use a serial cable to connect the Console port of SBC1000-X with a PC. Enter the‘en’ mode and input ‘show interface’ to query the IP address.

  • Page 21: Configuration Flows

    Web platform To delete configurations 3.3 Configuration Flows The following is the general configuration flows of SBC1000-X: Figure 3- 4 Configuration Flow 3.3.1 System Status Log into the Web interface, and the ‘System Status’ page is displayed. On the page, call statistics and its graphic, device information, MCU(Main Control Unit) status as well as general information are shown.
  • Page 22 The total number of registered users at current time Users Max. The maximum number of registrations that are simultaneously Registered processed since SBC1000-X is booted up Users Total Calls The total number of legal call requests since SBC1000-X is booted up SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...
  • Page 23 “Invalid” is shown License The remaining time of license validity Expires The current time of SBC1000-X, which can be modified or Current Time synchronized on the ‘System Date & Time’ page Running time The running time of the device since it is booted up SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 24: Access Network Status

    Besides, only the Admin port can be used to synchronize time with NTP. 3.3.2 Access Network Status Terminal users are registered to SBC1000-X through access network. The status of access network is always “true”, which means the access network is normal and available.

  • Page 25: Access Trunk Status

    The total number of legal calls routed by the access SIP trunk since Total Calls the device is booted up The total number of users that are successfully registered to Registered SBC1000-X by the help of the access SIP trunk and are still in validity period SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 26: Core Trunk Status

    The total number of users that are successfully registered to Registered SBC1000-X by the help of the core SIP trunk and are still in validity period The ASR of the core SIP trunk since the device is booted up;...

  • Page 27: Calls Status

    Calls are grouped into inbound calls and outbound calls. Inbound calls go from core network to SBC1000-X, while outbound calls are exactly the opposite. Inbound calls and outbound calls have their own statistics of ASR, number of calls that are being transcoded, number of current calls and number of total calls.

  • Page 28: Register Status

    Name Name (destination): refers to the name of the core network’s SIP trunk where the registration goes to Register Interval (source): the interval of registering to SBC1000-X by Reg. terminal user Interval Register Interval (destination): the interval of registering to core network’s SIP trunk by SBC1000-X...

  • Page 29: Attack List

    Attack List page, the source, IP address and interface of attacks to SBC1000-X are shown. Figure 3- 11 Attack List Table 3- 11 Attack List The source of an attack inflicted on SBC1000-X, for example, Source DDoS/DoS attacks The IP address of the attack source, or the destination port that is...

  • Page 30: Service

    ‘RTP Detection’. If ‘ RTP Detection’ is enabled, the SBC1000-X device will monitor the RTP packets of each call and will disconnect the call after it finds that no RTP packets are sent or received during the detection time.

  • Page 31: Number Profile

    The prefix set for callee numbers. It does not support Callee regular expression. Prefix When the prefix of a callee number matches the set prefix, the call SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 32: Time Profile

    On the Service -> Rate Limit page, you can configure the maximum registrations per second (RPS), maximum calls per second (CPS) and maximum concurrent calls for access network, access SIP trunk and core SIP trunk. SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 33: Black & White List

    SIP trunk or a core SIP trunk, the SBC1000-X device will refuse the calls and registration requests from this number. If a number is put on whitelist and the white list is adopted, the SBC1000-X device will accept the calls and registration requests from this number.

  • Page 34: Codec Profile

    Description The description of a specific blacklist/ whitelist 3.4.7 Codec Profile SBC1000-X supports such codecs as G729, G723, PCMU, PCMA, ILBC_13K, ILBC_15K, OPUS and AMR. You can group these codecs and adjust their priority according to your needs. SBC1000-X Session Border Controller...

  • Page 35: Number Manipulation

    The description of the codec group Max. Packetizing The maximum packetizing time that the codec group Time supports SBC1000-X supports codecs including PCMA, PCMU, Codec G.729A/B, G.723, iLBC,_13K, iLBC_15K, AMR and OPUS Payload The codec value of each codec, which cannot be modified...
  • Page 36 8000123, then the caller number will be changed into 8000; Suffix The suffix supports regular expression; Multiple suffixes can be set for one manipulation rule. Add Prefix The prefix added to the caller/callee number. For example, if the prefix SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 37: Number Pool

    Note: During number manipulation ‘Delete Prefix’and‘Delete Suffix’are carried out first, followed by ‘Add Prefix’ and ‘Add Suffix’ . If ‘ Condition’ is also set, SBC1000-X will match the condition based on the result of the abovementioned rules. If a number manipulation rule is used on the Service -> Access Network page, the Service ->...

  • Page 38: Sip Header Manipulation

    When the SIP headers of the messages related to calls passing through access network, access SIP trunk and core SIP trunk are not consistent with those required, you need to set rules to manipulate original SIP headers. SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...
  • Page 39 SIP message. -> when the source ID is equal to the set value, the Match: equal operation rule is activate. -> when the source ID matches the set regular expression, the Regex SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 40: Sip Header Passthrough

    Table 3- 21 SIP Header Pass The name of the ‘SIP header passthrough’ profile. It cannot be Name modified after the ‘SIP header pass’ profile has been added successfully Description The description of the ‘SIP header passthrough’ profile SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 41: Access Network

    That is to say, they cannot be passed through during calling. Please think carefully before passing through these two SIP headers, as they might conflict with the configurations of SBC1000-X. The following SIP heads are not allowed to be passed through:...
  • Page 42 The interface of the access network. It can be eth0, eth1, eth2 Interface or eth3 Transport Select a transport protocol for the access network. It can be Protocol UDP, TCP or TLS SIP Port The access network’s SIP listening port on the Ethernet SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...
  • Page 43 The QoS tag of meida messages Near-end NAT defaults to disabled. If it is enabled, the contact IP address contained in SIP messages sent out by SBC1000-X Near-end NAT will be turned into the outbound IP address of public network.
  • Page 44 Configure the duration of the session. During the duration, Session Expire SBC1000-X will send ‘reinvite’ messages to keep activating the session. Min. Session Minimum session duration is used to negotiate with the session...
  • Page 45 Configure the SIP request methods that can be accepted by the access network. If a SIP request method is not enabled, the system will reject SIP Methods the corresponding SIP request. By default, the INVITE request, REGISTER request and SESSION DISCONNECT request are accepted. SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 46: Access Sip Trunk

    Web platform 3.4.13 Access SIP Trunk Access SIP trunk can realize the connection between access network and SBC1000-X. On the Service -> Access SIP Trunk page, you can configure the parameters of access SIP trunk. SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...
  • Page 47 Name the access SIP trunk has been added successfully Description The description of the access SIP trunk The SBC1000-X device’s Ethernet interface configured to Interface connect the access SIP trunk. It can be eth0, eth1, eth2, eth3 or VLAN Select a transport protocol for the access SIP trunk. It can be...
  • Page 48 Media DSCP The QoS tag of media messages Near-end NAT defaults to disabled. If it is enabled, the contact IP address contained in SIP messages sent out by SBC1000-X Near-end will be turned into the outbound IP address of public network.
  • Page 49 Interval The interval to send option message to the peer device Session timer is a mechanism to keep activating sessions. If ‘Supported’ is selected, SBC1000-X will send ‘reinvite’ SIP Session messages to keep activating sessions within the configured Timer duration.
  • Page 50 If ‘Require’ is selected, the callee side of a call passing through the access SIP trunk also needs to support session timer. Configure the duration of the session. During the duration, Session SBC1000-X will send ‘reinvite’ messages to keep activating the Expires session. Min. Session...

  • Page 51: Core Sip Trunk

    SESSION DISCONNECT request are always accepted. 3.4.14 Core SIP Trunk Core SIP trunk can realize the connection between SBC1000-X and the core network. On the Service -> Core SIP Trunk page, you can configure the parameters of core SIP trunk.
  • Page 52 Web platform SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...
  • Page 53 The QoS tag of media messages Near-end NAT defaults to disabled. If it is enabled, the contact IP address contained in SIP messages sent out by SBC1000-X will be turned into the outbound IP address of Near-end NAT public network.
  • Page 54 RFC2833; If the DTMF mode of an core SIP trunk differs from that of access network, SBC1000-X will convert it through DSP Select a SIP header manipulation rule for inbound calls of the core SIP trunk. If a call matches the manipulation rule, the...
  • Page 55 SIP trunk also needs to support session timer. Configure the duration of the session. During the duration, Session Expires SBC1000-X will send ‘reinvite’ messages to keep activating the session. Mini Session The minimum session duration which is used to negotiate with...
  • Page 56 INVITE message is extracted as callee number； Configure the SIP request methods that can be accepted by the core SIP trunk. SIP Methods If a SIP request method is not enabled, the system will reject the corresponding SIP request. SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 57: Routing Profile

    10 calls comes in, 6 calls will be routed by the first SIP trunk, and 4 calls will be routed by the second SIP trunk. The name of the access SIP trunk or core SIP trunk included in Trunk Name the trunk group SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...
  • Page 58 If this parameter is null, it means caller number can be any number. Callee The callee number set for matching the route, which supports SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...
  • Page 59 If it is on, the SIP header of a call routed by the route will be SIP Header manipulated according to the configured manipulation rule; The Passthrough parameter is off by default. For manipulation rule, please make reference to 3.4.10 SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 60: Security

    In the Security section, you can configure the system security strategies, anti-attack strategies and access control strategies. 3.5.1 System System security is mainly used to prevent SBC1000-X from being attacked by various DOS/DDOS floods, so as to ensure stable running of the device. Figure 3- 29 System Security Table 3- 27 System Security If ‘Attack Log’...

  • Page 61: Access Control

    PPS (Packet Per Second); the range of the peak PPS is from 1 to 1000. TCP NULL is a scan to determine if ports are closed on the target device. If this parameter is enabled, SBC1000-X will drop TCP TCP-NULL packages, and the peer device cannot learn whether the ports of SBC1000-X are closed or not.

  • Page 62: Security Policy

    By default, GE0, GE1, GE2 and GE3 are not allowed to access the Web interface. The SSH port of SBC1000-X defaults to 22. If you select the checkbox on the right of GE0, GE1, GE2 or GE3, it means the selected port.is allowed to access the SSH of SBC1000-X.
  • Page 63 If this parameter is null, it means CPU usage is not a condition for triggering security strategy. The maximum packet traffic sent by the peer IP or received by local Traffic port. If this threshold is surpassed, SBC1000-X will execute the （KBPS） configured action on the packets. SBC1000-X Session Border Controller...
  • Page 64 Figure 3- 33 SIP Security Strategy Click to add a strategy to prevent attacks from SIP-based devices. Click delete a strategy, while click to modify the strategy. Figure 3- 34 Add SIP Security Strategy SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 65: System

    Figure 3- 36 Web Configuration 3.6.3 Network On the System -> Network page, you can configure the IP address, Subnet mask, gateway and DNS server. You can also add VLAN on the page. Figure 3- 37 Network Port SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...
  • Page 66 Figure 3- 39 Add VLAN Table 3- 30 Network Configuration VLAN ID The ID of the added VLAN Interface Network port: Admin, GE0, GE1, GE2 and GE3 The MTU (Maximum Transmission Unit) of the network port SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 67: Port Mapping

    The address of DNS server of network port or VLAN 3.6.4 Port Mapping To ensure the security of the LAN (local-area network), SBC1000-X will reject the connection request from the wide-area network (WAN). Port mapping allows a client in the wide-area network to visit the SBC1000-X device in the local-area network.

  • Page 68: Static Route

    Web platform The port of the client in the wide-area network, which is to External host visit the SBC1000-X device in local-area network, such as port number 5060 Transport Choose TCP, UDP or TCP\UDP Protocol The mapped interface of the SBC1000-X device in...

  • Page 69: User Manager

    3.6.6 User Manager On the System -> User Manager -> Password page, you can modify administrator’s password for logging in the SBC1000-X device. Factory defaults for administrator’s username and password are ‘admin’ and ‘admin@123#’ which are also used to log in SSH.
  • Page 70 Web platform Figure 3- 43 Add User and Assign Permissions Table 3- 33 User List The name of the user, which is used to log in the SBC1000-X Username device Password The password for the user to log in the SBC1000-X device...

  • Page 71: Date & Time

    NTP server. 3.6.8 Upgrade On the System -> Upgrade interface, you can upgrade the SBC1000-X to a new version. But you need to restart the device for the change to take effect after executing upgrade. Figure 3- 45 Software Upgrade The version file used for upgrade is generally named as‘1.91.x.x.ldf’...

  • Page 72: Backup & Restore

    3.6.10 Double-device Hot Stand by Two SBC1000-X devices can be connected with each other through the GE1 port for the sake of hot standby. That is to say, the two SBC1000-X devices work in the active/standby mode. When the active device fails, it changes to the standby state while the standby device changes to the active state and take over the functionality of the failed device.

  • Page 73: License

    3.6.12 Certificate On the System -> Certificate page, you need to upload a certificate to ensure the secure login to the Web interface of the SBC1000-X device. You cannot log in the device until you has uploaded a certificate. Figure 3- 49 Upload Certificate 3.7 Maintenance...

  • Page 74: Operation Log

    You are allowed to set query criteria to view the logs that you want. Figure 3- 52 System Log 3.7.4 Log Management On the Maintenance -> Log Management page, you can set the log level to filter logs, and can export the logs of different level. SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 75: Tools

    On the following interface, you can capture data packages of the available network ports. You can also set source IP, source port, destination IP or destination port to capture the packages that you want. SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 76: Abbreviation

    Denial of Service DDOS Distributed Denial of Service PRACK Provisional Response ACKnowledgement DTMF Dual Tone Multi Frequency DSCP Differentiated Services Code Point Real-time Transport Protocol Automatic Speech Recognition Main Control Unit Main Function Unit SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

  • Page 77: Command Lines

    To view the register states of users enable# show service To view the running states of services enable# show uptime To view the running time of the system enable# show version To view the firmware version that is used currently SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...
  • Page 78 #ps To view the running system programs enable #reboot system To reboot the system enable #reboot board [0-3] To reboot the user board [0-3] configure #no trace all To exit the tracing function SBC1000-X Session Border Controller Copyright©2011-2021 Dinstar...

This manual is also suitable for:

Sbc1000-x

Table of Contents