1. MediantTM 1000 Multi Service Business Gateway
Product Presentation
May 2009

2. Mediant 1000 MSBG System Overview MSBG Functionality and Features
Presentation Topics
MSBG Concept
Mediant 1000 MSBG System Overview
MSBG Functionality and Features

3. Mediant 1000 MSBG System Overview MSBG Functionality and Features
Presentation Topics
MSBG Concept
Mediant 1000 MSBG System Overview
MSBG Functionality and Features

4. Today’s Converged Small-Medium Enterprise
PBX
Corporate
LAN
Interworking is needed
Firewall
WAN
Router
SBC
WAN Access
PSTN
VoIP
Gateway
Collection of Devices
Multiple Vendors to deal with
Cumbersome IT staff training
Separate Management methodologies
No distinct demarcation point
High CAPEX High OPEX

5. The Solution: Multi-Service Business Gateway
PBX
Corporate
LAN
SBC
WAN
Media
Gateway
Router
Firewall
Access
3rd Party IP-PBX
on OSN
IP PBX
Corporate
LAN
MSBG
WAN

6. AudioCodes MSBG VoIP SBC Router/ Switch FireWall Network & User Access
AudioCodes MSBG Offer
Leverages AudioCodes best of bread Media Gateway technology
Implement Session Border Controller (SBC) based on AudioCodes SBC technology
Add full-featured Enterprise-Class LAN Switching, Routing, Advanced QoS, Firewall and WAN access
Embedded integration of 3rd party IP-PBX hosted applications
Enhanced Media Processing functionality
AudioCodes MSBG
VoIP
SBC
Router/
Switch
FireWall
Network &
User Access
IP-PBX
Media
Processing

7. Mediant 1000 MSBG System Overview MSBG Functionality and Features
Presentation Topics
MSBG Concept
Mediant 1000 MSBG System Overview
MSBG Functionality and Features

8. Field Proven Design and Functionality
Mediant 1000 MSBG inherited the field proven design of the Mediant 1000
Reuse of Hardware and Media Gateway software stack
Replace HW with ‘Hardware’ 8

9. Mediant 1000 MSBG – Front View (1)
Scalable and cost-effective , 1U (“pizza-box”) chassis
All voice modules are hot swappable
Up to 6 I/O modules for analog and digital PSTN interfaces
Supports 1, 2, or 4 E1/T1/J1 trunk spans
Up to 24 analog ports FXS/FXO, each module with up to 4 ports and up to 6 analog modules
Up to 20 BRI ports, each module with 4 ports per module, and up to 5 modules per chassis

10. Hardware Profile – Front View (2)
Single or Dual AC Power Supply
CRMX Module with Dual Processors
Media Processing Modules for IP2IP and Conferencing off loading

11. Mediant 1000 MSBG – Rear View (1)
Open Solution Network (OSN) Server for 3rd Party solutions
Hard Disk

12. CRMX Module The Mediant 1000 MSBG introduces a new RMX module
Dual Processors
Processor for Data Networking
Processor for VoIP services
Dual processors design is optimized
for best performance
3 port 10/100/1000Base-T LAN Switch
Integrated Mezzanine for various WAN
access interfaces
10/100/1000Base-T Copper
Roadmap: 1000BaseSX/LX, T1 and ADSL2+ and SHDSL
LAN
Switch
WAN Access

13. Mediant 1000 MSBG System Overview MSBG Functionality and Features
Presentation Topics
MSBG Concept
Mediant 1000 MSBG System Overview
MSBG Functionality and Features

14. MSBG Functionality MSBG Data LAN Switching Routing Data Security VoIP
Media Gateway
SAS
SBC

15. MSBG Data Functionality
LAN Switching
Routing
Data Security
VoIP
Media Gateway
SAS
SBC

16. MSBG LAN Switching Functionality
CRMX supports on-board 3 10/100/1000Base-T LAN switch ports with non-blocking switching performance
Port-based VLANs supporting 802.1Q
access and trunk ports
Supports 802.1p/ToS/Diffserve QoS
High performance lookup engine with support for up to
1024 MAC addresses

17. MSBG Routing Functionality
Dynamic Host Configuration Protocol
DHCP server, DHCP Relay and DHCP Client
DHCP Server supports fixed binding of IP to MAC address
Multiple IP interfaces for LAN/WAN routing
IP interfaces assignment to different VLANs
Routing
Static Routing
RIPv1 – RFC 1058
RIPv2 – RFC 2453
OSPFv2 – RFC 2328
BGPv4 – RFC 1771, RFC 2858
BGP Extended Community Attribute for BGP/MPLS VPNs
Policy-based Routing (e.g. DSCP-based, BGP Policy Routing)
Network Address translation
WAN access via PPPoE, PPTP, L2TP, DHCP

18. MSBG Quality of Service Architecture
The
INTERNET
The
ACCESS
The
MSBG
The
LAN
SIP Server
PBX
Web Server
Internet
Access
Network
Server
MSBG
Other CE
802.1p Prioritization
Diffserv – MAC, IP, DSCP/ToS, port and application-based Classification, Marking and Queuing
Traffic Shaping
WAN Rate Limiting
TCP Serialization Reduction
BW Reservation

19. Class-Based Queuing (CBQ) for VoIP Prioritization over Data
WAN
LAN
MSBG allows dynamic BW allocation with
automatic ALG SIP VoIP classification and Priority
while keeping WAN fully utilized 2 4
WAN Link Throughput
Data
traffic may consume more BW, while being shaped by MSBG at MAX WAN Link throughput
VoIP sessions terminates freeing the WAN for Data
traffic 3
MSBG polices Data traffic due to higher priority VoIP 1
Data traffic
consumes WAN
fractionally
VoIP
BW is guaranteed

20. MSBG Data Security Architecture
The
INTERNET
The
ACCESS
The
MSBG
The
LAN
VPN Teleworker
Web Server
Internet
Server
MSBG
SME/SMB VPN Router
Other CE
SPI F.W with ALG
Port Forwarding and DMZ support for Intranet Servers/Hosts
Web Site Restriction
NAPT/NAT Services
VPN – Site-to-Site(IPSec), Teleworker VPN(PPTP, L2TP, IPSec)

21. Application Level Gateway (ALG)
ALG allows Application Recognition intelligence to feed F.W and QoS functions for optimized, configuration-free performance:
FTP
ICMP
SQLNet
NETBios
TFTP
DNS
Video
Quick Time, Real Player
H.323
Net Meeting
SIP
MIRC
AOL IM
ICQ
Net2Phone
MSFT IM
Windows messenger
Yahoo IM
IPSec ESP (IPsec client )
IKE
Skype

22. MSBG Functionality MSBG Data LAN Switching Routing Data Security VoIP
Media Gateway
SAS
SBC

23. MSBG SIP Media Gateway (1)
Uses Mediant 1000 most advanced and mature SIP implementation
Latest SIP version, RFC 3261 and IETF drafts
RTP and SRTP (with SDP Security – RFC 4568)
Lifeline switching in case of power failure and optional PSTN fallback or alternative routing in case of network failure
On Analog and Digital interfaces
Supports optional Media Processing Module
Up to 20 conference legs
Recording, playing and tone detection

24. AudioCodes SAS
Continuous VoIP service for IP phones, IP-Centrex and distributed IP-PBX networks
Soft Switch/
IP-PBX
PSTN
WAN IP
Network 1 4 2
Multi-location Centrex – two or more location are part of the same Centrex
MAC - Move, Add, and Change
Enterprise
LAN 3
SIP Signaling
Soft Switch Health SIP Check
IP2IP Calls in Emergency Mode
IP to PSTN Calls in Emergency Mode

25. AudioCodes MSBG SBC (1)
The MSBG SBC is an intermediate SIP session controlling entity focused on SME/SMB requirements
MSBG SBC works in a B2BUA mode
Controlling SIP Services between Enterprise LAN and SP WAN networks
Used for connecting different SIP applications\IP-PBXs
SBC

26. AudioCodes MSBG SBC (2) MSBG SBC Features: Transcoding and Mediation
NAT Traversal
Topology Hiding
VoIP SPI Firewall
SIP Routing
Admission Control
SIP Normalization
Survivability
DoS Protection

27. NAT Traversal (1)
Basic NAT Traversal (e.g. ITSPs with Globally Unique IP)
Allowing LAN to WAN VoIP Signaling and Bearer by using two independent legs
TDM Transport
VoIP
VPN
MPLS VPN Backbone
Enterprise
LAN
ITSP
Soft Switch
IP PBX
SIP Trunk

28. NAT Traversal (2) Far End Users (FEU) and UA behind a NAT in the WAN
Managing dynamic DB according to FEU Registrations
Maintaining remote NAT binding state, by setting frequent Registration refreshments
Offloading FEU refresh Registrations from the LAN IP PBX
First Incoming RTP Packet is used to
overcome bearer NAT Traversal
FEU
Enterprise NAT 1
Enterprise
VPN
MPLS VPN Backbone 3
Enterprise
LAN 2
FEU registers in MSBG DB
Offloading FAU Registrations from IP PBX
NAT Binding Refresh
IP PBX

29. VOIP Firewall and security
Layer 3 firewall – out of the Data/Routing functionality of the MSBG
SIP Signaling
Deep and stateful packet inspection of all SIP Signaling packets
Each SIP dialog initiation may be accepted\ rejected according to the values of the incoming SIP message and other layer 3 characteristics
SIP TLS provides for Authentication as well
Packets not belonging to a valid SIP dialog are discarded
RTP
Opening pin holes according to offer answer negotiation
Deep packet inspection of all RTP packets
Late rouge detection
Broken connection
Black / White lists – for both Layer 3 FW and SIP Classification
Broken connection – disconnect call in case RTP connection is broken