Cisco Systems ASR 1000 manual IPv6 Pinholes, IPv6 No Napt Support for Media Flows

Page 92

Chapter 9 Topology Hiding

IPv6 Support

packet has the endpoint’s IP address as the destination address, and the MGC/SBE IP address as the source address. In Single NAPT, the DBE changes the source address to use the DBE IP address. See the “IPv6 Single NAPT for Signaling” section on page 9-7.

No NAPT means the received SBC packets do not contain any DBE local addresses because the DBE does not translate any IP addresses and ports during packet forwarding. The DBE rewrites neither the source nor destination addresses and ports in both directions. See the “IPv6 No NAPT Support for Media Flows” section on page 9-6

IPv6 Pinholes

DBE support of IPv6 pinholes includes the following functionality:

•The DBE supports forwarding of media from one IPv6 endpoint to another IPv6 endpoint.

•The DBE supports IPv4 and IPv6 endpoints simultaneously. However, no interworking between IPv4 and IPv6 endpoints is supported. IPv4 endpoints can only forward media to other IPv4 endpoints and IPv6 endpoints can only forward media to other IPv6 endpoints.

•The DBE supports configuration of IPv6 pinhole addresses and pinhole address pools.

•DBE supports signaling pinholes using IPv6 addresses.

Support is added for the MGC to specify the address and port in the Megaco local descriptor for terminations as one of the following:

•An address and port that are not owned by the SBC and not configured in a media address range on the SBC, but matching the remote address and port for the other termination in the stream.

•An address range, in the form of a classless interdomain routing (CIDR) mask (for example, 10.13.8.0/21) together with a 0 port number, that does not overlap with any address ranges owned by the SBC or any media address range configured on the SBC, but the address and port match the gm/rsam (Gate Management/remote source address mask) for the other termination in the stream.

SBC recognizes these “local” addresses as signifying Single NAPT pinholes. And if specified for both terminations in the stream, SBC recognizes these addresses as No NAPT pinholes. All pinholes only forward packets to a full destination address and port that was either specified in the remote descriptor or latched to (within a gm/rsam that matches the local address mask).

IPv6 No NAPT Support for Media Flows

To support IPv6 on the DBE deployment, media flows do not support NAPT. No NAPT support means that no IP addresses and ports are translated by the DBE from a private address to a public address (for multiple users to share a single public address).

Because media addresses and ports are not translated, media flows on both sides of the media address are programmed with private, local addresses and ports that do not belong to the DBE. These local addresses and ports are specified by the MGC to match the remote address and port on the opposite side of the media address. Traffic in both directions is addressed directly to the remote endpoint on the other side of the DBE. The DBE rewrites neither the source nor destination addresses and ports in both directions because the DBE does not translate any IP addresses and ports during packet forwarding. Neither the source address nor destination address contains any DBE local media addresses.

Cisco IOS XE Integrated Session Border Controller Configuration Guide for the Cisco ASR 1000 Series Aggregation Services Routers

9-6

OL-15421-01

 

 

Page 91 Page 93
Image 92
Page 91 Page 93
Contents Americas Headquarters Page N T E N T S IiiQoS Bandwidth Allocation Traffic Management Package Support Local Source Properties Address and Port IPv6 Support ViiEvents Storage Until Event Acknowledgment Preface Document Revision HistoryObjectives OL-15421-01 May 5 This document was first publishedIntended Audience OrganizationRelated Documentation Document ConventionsCisco ASR 1000 Series Router Documentation Cisco IOS Release 12.2SR Software PublicationsXii Obtaining Documentation and Submitting a Service Request XiiiXiv General Overview ContentsCisco ASR 1000 Series Routers Overview Distributed and Unified Models Example of SBC High Level ArchitectureOn page 1-3illustrates the unified model Supported Integrated Session Border Controller Features Release Feature Name Related SBC Commands DocumentedPackage segment Cisco IOS Logging Level in Configuring Cisco IOSNone XE ReleaseMedia-address ipv4 Transaction-pending command Deployment of the Integrated Session Border ControllerIntegrated SBC Used for VoIP Interworking Integrated Session Border Controller DBE Deployment Scenario Restrictions for Integrated Session Border Controller Configuring Integrated Session Border ControllerPrerequisites for Integrated Session Border Controller Prerequisites Summary StepsEnables privileged Exec mode Enter your password if promptedEnters global configuration mode Enters into interface configuration modeConfigures the DBE to use a specific IPv4 H.248 control Own address when connecting to the SBEConfigures the H.248 controller for the DBE and enters into Controller H.248 configuration modeExamples Troubleshooting TipsWhat To Do Next Configuring H.248 Logging Level Creates the DBE service on the SBC and enters into SBC-DBE configuration modeSets a specified logging level to generate detailed logs Messages sent and received. Turns on consoleEnabling H.248 Logging Requests and Responses Example H.248 Log Output Configuration ExamplesThis section provides the following configuration examples SBC DBE Configuration Steps Example Making Global Changes to Controllers Example Following example shows the initial SBC configuration == Make change to local portMaking Changes to Individual Controller Settings Example Control-address h248 ipv4 172.25.2.26 controller h248Topology Priority Indicator Yes Emergency Indicator Ieps Indicator YesCisco H.248 Profile Overview of ProfileProfile Packages Package ID VersionPackage ID Version Support Dependent On Dtmf Interworking Information About Dtmf InterworkingSIP to RTP Interworking Configuring Default Duration of a Dtmf EventRTP to SIP Interworking Enters the mode of a DBE service and enters into SBC-DBE Configuration mode. Use the sbc-name argument to specifyName of the DBE service Configures the default duration of a Dtmf eventPage Prerequisites for Implementing Media Address Pools Restrictions for Configuring Media Address PoolsMedia Address Pools Configuring Media Address Pools Information About Media Address PoolsIs configured Enters into SBC-DBE configuration modeConfiguration mode Creates a port range for the configured mediaConfiguring Media Address Pools Example Quality of Service and Bandwidth Management Traffic Management Package SupportPage Parameters on AC and per SDP on Dscp Marking and IP Precedence MarkingDscp Re-Markings Rtcp Policing Using Tman Package Rtcp Policing Not Using Tman PackageQoS Bandwidth Allocation Rtcp PolicingImplementing Two-Rate Three-Color Policing and Marking Two-Rate Three-Color Policing and MarkingEnabling Two-Rate Three-Color Policing and Marking DBE Restrictions Related Commands Page Packages-Signaling and Control Enabling Optional H.248 PackagesAddress Reporting Package Segmentation Package SupportSession Failure Reaction Package Tsc-quiesce Feature Termination State Control PackageTsc-suspend Feature 248.1v3 Support Vlan Package Syntax-Level SupportMGC-Controlled Gateway-Wide Properties Page Services-Signaling and Control DBE Signaling Pinhole Support Extension to H.248 Audit Support Extension to H.248 Termination Wildcarding SupportFlexible Address Prefix Provisioning Local Source Properties Address and Port Locally Hairpinned SessionsTwice Napt Pinhole Hairpinning No Napt Pinhole HairpinningMGC-Specified Local Addresses or Ports Restrictions for Nine-Tier Termination Name Hierarchy Multi-Stream TerminationsNine-Tier Termination Name Hierarchy Information About Nine-Tier Termination Name Hierarchy Displaying the Nine-Tier Termination Name HierarchyDisplaying the Nine-Tier Termination Name Hierarchy Example Abc/voice/gn/0/1/0/1/ac/3Optional Local and Remote Descriptors RTP Specific Behavior Support ServiceChange Notification for Interface Status ChangeRemote Source Address Mask Filtering Sbc interface-id value End Configuration Example Output MAX Timer Tsc-Delay TimerTmax-timercommand configures the value of the T-MAX timer Video on Demand VOD SupportServices-Signaling and Control Video on Demand VOD Support Services-Signaling and Control Video on Demand VOD Support Integrated Session Border Controller Security Firewall Media Pinhole Control Interim Authentication Header Support Latch and Relatch SupportLocal Source Properties Address and Port Napt and NAT Traversal Etsi TS 102 333 version 1.1.2 Gate Management PackageTopology Hiding Traffic Management PolicingTopology Hiding IPv4 Twice Napt IPv6 Inter-Subscriber BlockingQoS Policy-Map-Based Inter-Subscriber Blocking Method Router# show run interface gigabitEthernet 0/1.1101Router# show class-map IPv6intersubscriber IPv6 Support ACL-Based Inter-Subscriber Blocking MethodIPv6 Pinholes IPv6 No Napt Support for Media FlowsIPv6 Single Napt for Signaling Send RecvSingle Napt Signaling Flow No Napt Pinholes Topology Hiding No Napt Pinholes 10-1 High Availability SupportIntegrated Session Border Controller High Availability Hardware Redundancy Software RedundancyRoute Processor Redundancy RPR 10-210-3 SSO SupportIssu Support 10-4 High Availability Support Issu SupportQuality Monitoring and Statistics Gathering 11-1Congestion-threshold Command Billing and Call Detail RecordsDBE Status Notification Enhanced Event Notification and AuditingRetention and Returning of H.248 Event Information 11-3Association Reset Resetting the Media Timeout TimersSilent Gate Deletion 11-411-5 Middlebox Pinhole Timer Expired EventNetwork Package Quality Alert Event 11-6 Provisioned Inactivity TimerRelated Command IN-1 IN-2 IN-3 Pinhole Pinhole timeout Policing Asymmetric policing Ipv6 packetsRTP specific behavior support SBE IN-4IN-5 IN-6
Top Page Image Contents