1. both for Hosted SIP Services
The IX78 for
SMB Deployments
both for Hosted SIP Services
and SIP Trunking
Intertex Data AB, March 2012
© 2012 Intertex Data AB 1 1

2. What’s in the IX78?
ADSL2+ modem with Annex A/B/M (24 Mbps DS, 3 Mbps US), or
Ethernet WAN (VLAN capable)
Triple play and various routing configuration possibilities
Router with any port, any service capability and 4-5 port Ethernet Switch
Wireless b/g as Access Point (3 SSID for separate WLANs)
Business Firewall
Advanced QoS for voice, IP-TV etc.
VPN (IPsec with certificate handling)
TR-069 and proprietary flexible provision system
and in addition to VoIP things like
2 FXS ports for analog telephones and FAX with T.38 support
FXO port: Real SIP/PSTN gateway + Fallback on WAN loss
Let’s have closer look what can be achieved!
there are outstanding features enabling new applications and services
Unique support for standard SIP phones and soft clients on the LAN and WLAN
SIP Trunking of PBXs – unequalled interoperability list
SIP Proxy, Registrar and PBX-like functionality
and more… 2 2

3. SIP is the Most Important Protocol, but…
A common Network and common Protocols changed our lives:
SMTP gave us global ! HTTP gave us the WEB!
SIP is the Internet standard for Live IP Communication: The next step of Internet usage!
Find each other and do something in real time. Telephony being just one application.
IMS
(SIP based)
Internet
web
However, SIP does not traverse the common NATs and firewalls* separating the LANs from the Internet .
* Live IP Communication Requires:
Locate the person
Set up a session
Open real time media streams FW FW FW FW
LAN
LAN

4. We Need a Future of Live All IP Connectivity!
IMS
Global IP Connectivity
VoIP++
All SIP Services
In the world of Unified Communication and global IP-communication, SIP must be used as general as SMTP for and HTTP for the Web!

5. The Intertex & Ingate SIP Architecture
To get general NAT/Firewall SIP traversal:
Firewall & NAT Router
Dynamic NAT & Firewall Engine
Used for NAT/Firewall traversal and also as:
Outbound proxy
Inbound proxy
SIP Server
PBX (The SIP Switch)
Most of these elements used when SIP Trunking
SIP
Proxy
SIP Proxy Server, capable of routing to/from various address spaces (NAT)
The routing SIP Proxy Server controls the media through the NAT & Firewall
User
Location
SIP Registrar for user location information
B2BUA invoked in addition when required
UA |

6. The Many Faces of the IX78
In addition to being a router, a firewall, a wireless access point, an ADSL modem etc., the IX78 has several SIP and Telephony related functions:
SIP ATA device (2 FXS ports, 1 FXO port)
SIP E-SBC Gateway for hosted services – LAN and WLAN SIP devices have global SIP connectivity
SIP Trunking E-SBC – Connecting IP PBXs directly to operator’s SIP Telephony Services
Unique SIP support including proxy and registrar, various VoIP network architectures supported, advanced SIP and Telephony routing, built in PBX
IX78 for Hosted SIP Services
All these functions can be used together and at the same time! 6 6

7. Ordinary Voice IADs – Good for Telephony Replication…
Telephone ports (FXS) on the CPE is a popular way to deploy IP telephony. By logically placing the SIP clients on the outside of the NAT/Firewall, unreliable work-around methods like STUN, TURN and ICE become unnecessary. However, this only gives POTS replication, often even stopping general SIP based services!
Internet
SIP to the LAN or WiFi
Calls between SIP clients on LAN
Calls between internal ATA ports and LAN clients
Call transfers, 3-party calls, etc.
Using SIP generally over the Internet (Operator “took all the SIP”)
(Users must not be deprived of general SIP-functionality!)
Often problems with, or total lack of:
The 5060 SIP-port is just grabbed on the outside to the FXS ports!
Lower level SIP ALGs often cause problems and do not handle more than basic scenarios. 7 7

8. Intertex’ IADs are SIP Capable NAT/Router/Firewalls
IMS
Internet
SIP
No battery draining of WiFi mobile phones, otherwise caused by keep-alive packets* inhibiting sleep mode.
* Work-around methods for SIP NAT-traversal like STUN, TURN, ICE and Far End NAT Traversal use frequent keep-alive packets to keep holes in the NAT/Firewall open.
Problems solved where they occur
Wired or wireless SIP clients (phones, soft clients, PDAs)
No special requirements on the SIP Client – Just standard SIP
All Intertex CPEs have a SIP Proxy based SIP aware Firewall/NAT
General, can handle complex call scenarios and all SIP services
Additional functionality available (SIP server, PBX functionality etc.) 8 8

9. Full Support for all SIP Applications
SIP offers so much more than just telephony
Go beyond POTS replacement! 9 9

10. The Many Faces of the IX78
In addition to being a router, a firewall, a wireless access point, an ADSL modem etc., the IX78 has several SIP and Telephony related functions:
SIP ATA device (2 FXS ports, 1 FXO port)
SIP E-SBC Gateway for hosted services – LAN and WLAN SIP devices have global SIP connectivity
SIP Trunking E-SBC – Connecting IP PBXs directly to operator’s SIP Telephony Services
Unique SIP support including proxy and registrar, various VoIP network architectures supported, advanced SIP and Telephony routing, built in PBX
IX78 for SIP Trunking
All these functions can be used together and at the same time! 10 10

11. SIP-Trunking for the IX78 Connecting IP PBXs to Operators’ SIP Services
The era of replacing T1/E1/PRI lines for IP connections to operators’ SIP telephony services has begun.
Most IP PBXs require SIP traversal of the enterprise firewall and some special additions.
Intertex’ sister company Ingate has taken the SIP-Trunking lead.
IX78 can enable E-SBC (Enterprise Session Border Controller) functions for SIP Trunking
IX78 includes the same SIP Trunking functionality as the Ingate Enterprise line of E-SBCs! 11

12. IX78 E-SBC Enterprise Line of E-SBCs
Ingate Firewalls and SIParators® – E-SBC
From 50 to simultaneous calls (with media)
Used in a wide variety of SIP Trunking installations
NAT/Firewall traversal
Superior SIP Normalization
Multi level security, incl. SIP IDS/IPS
QoS (Quality of Service)
Failover configurations
1800/3000/8000 Calls*
4 500/ 4 500/ Mbit/s
/ / Packets/s
150/400/1000 Calls*
500/700/900 Mbit/s
40 000/80 000/ Packets/s
Software
Firewall/SIParator ®
Calls*
Ingate IX78 for operator volume deployments
50 Calls*
200 Mbit/s
Packets/s
Can be installed on a
virtual machine or
natively x86 Linux Servers
(industry-standard PC architecture)
50 Calls*
90 Mbit/s
Packets/s
*) Calls = Concurrent RTP Sessions = SIP Trunks

13. Confirmed Interoperability: Ingate & Intertex SIP Trunk Providers IP-PBXs
Aastra
Aastra/Ericsson MX One
Adtran UC Server
Digium/Asterisk
Avaya Aura
Avaya IP Office
Avaya SES/CM
Avaya QE
Brekeke
Broadsoft
Cisco
Fonality
HP/3Com -VCX
Innovaphone
Interactive Intelligence
Iwatsu
LG Nortel
Microsoft OCS
Mitel
NEC / Sphere
Nortel BCM
Nortel SCS
Objectworld
Panasonic
Samsung
SER
Shoretel
Siemens
SIP-Gear
Swyx
More in pipeline....
360 Networks
Airespring
AT&T
BandTel
Bandwidth.com
Broadvox
BT (British Telecom)
Cablevision
Cbeyond
Cellip
Comm Partners
Cordia Corporation
Deltacom
Excel Switching
Gamma Telecom
GEOS
Global Crossing
IP-Only
Nectar
Level 3
Netlogic
Netsolutions
Nexvortex
Nuvox O1
One Communications
Paetec
Primus
RNK Telecom
Skype
TDC
Telavox
Tele2
Tele Pacific
Teletek
TeliaSonera
Toplink
Tritel
VoEX
Voice Flex
VoIP Unlimited
Voxbone
Voxitas
XeloQ
More in pipeline...
SIP Trunk
Compliant with
Carrier Equipment
Acme Packet
Broadsoft
Genband
Sonus
Sylantro
SER
NSN
More in pipeline…

14. The IP-PBX Trunk Must Meet Service Provider Trunk
PSTN
SIP Trunking Provider Network GW
SIP System
Why may an IX78 be required to connect a PBX?
NAT/Firewall Traversal – Must NAT to same address space!
Basic SIP and Network Interoperability - E.g. Authentication, Registrations, UDP/TLS/TCP, Dynamic IP address, etc.
SIP Repair - E.g. Call Transfer, Fragmented packets, Bugs, etc.
Features - E.g. Remote Users, Administration (remote and local)
Security - E.g. Will LAN be opened? Is the PBX designed to be public?
SIP Trunk
IX78 1)
2) 3) 4) 5)
2) 3) 4) 5)
2) 3) 4) 5)
VoIP & Data LAN
PBX Type 2
IP-
PBX
Few PBXs are of this type. Asterisk with firewall (IPtables /NETfilter) can be compiled and configured this way, but requires a lot.
VoIP & Data LAN
IP-
PBX
PBX Type 1
Modern IP-PBXs are of this type. Media goes directly between phone and SIP Trunk.
 SIP Trunk Interface  
Signaling:
Media:
Data LAN only
PBX with
system
phones
PBX Type 1.5

15. Public Internet IP-PBX SIP Trunking Provider Firewall
Intertex IX78 Simply Presents the SIP Trunking Service on the Customer’s Protected Combined VoIP & Data LAN, Ready for any PBX to Use
SIP Trunking Provider
Public Internet GW
PSTN
SIP System
Remote Users
Intertex IX78
IP-PBX
Firewall
Demarcation point of service and bringing SIP communication to the LAN
Data & VoIP LAN
Soft Clients and Multimedia Terminals

16. Public Internet IP-PBX SIP Trunking Provider Firewall
… or from an Extra IP Connection, still in Parallel with an Existing, non SIP Aware Firewall
SIP Trunking Provider
Public Internet GW
PSTN
SIP System
Remote Users
Intertex IX78
Firewall
IP-PBX
Demarcation point of service and bringing SIP communication to the LAN
Data & VoIP LAN
Soft Clients and Multimedia Terminals

17. Public Internet IP-PBX SIP Trunking Provider
… or the Intertex IX78 can be the Company Firewall, presenting the Customer with a Protected Combined VoIP & Data LAN, Ready to use!
SIP Trunking Provider
Public Internet GW
PSTN
SIP System
Remote Users
Intertex IX78
IP-PBX
Demarcation point of service and bringing SIP communication to the LAN
Data & VoIP LAN
Soft Clients and Multimedia Terminals

18. The Intertex IX78 Supports All of these Architectures!
…and the IX78 can Support Many WAN Layer 2 and Layer 3 Architectures with QoS Separated WAN Interfaces (inherited from it’s triple play capabilities)
Private Virtual Circuits
E.g. Telia
Internet
ADSL
PVC1
IP-TV
VoD
IMS
VoIP
PVC2
PVC3
E.g. Telia
Internet
Ethernet
VLAN1
IP-TV
VoD
IMS
VoIP
VLAN2
VLAN3
Virtual LANs (VLAN)
E.g. B2
Internet
Ethernet
WAN1
IP-TV
VoD
IMS
VoIP
WAN2
WAN3
IP QoS Separated Subnets
IP Level QoS
E.g. BT
Internet
ADSL or Ethernet
Priority3
Priority2
Priority1
IMS
VoIP
IP-TV
VoD
The Intertex IX78 Supports All of these Architectures! 18 18

19. Proposed Setup for the DOCSIS Network
PSTN
Easy and advantageous installation using advanced WAN SIParator mode
SIP Trunk Provider GW
Public Internet
SIP System
Plug in existing firewall to Ethernet port 4 on the IX78 (bridged connection to the WAN)
IX78 WAN SIParator will handle QoS (backing off firewall’s data traffic if required)
WAN SIParator 2 – requires two IP addresses, one for the firewall, another for the IX78
WAN SIParator 1 – requires only one IP address, shared between the IX78 and the firewall
DHCP or fixed WAN IP address(es)
CMTS
Bridge for Existing NAT/ Firewall (non SIP aware)
Cable Modem
IX78
E-SBC
IP-
PBX
NAT/
Firewall
Data & VoIP LAN

20. SIP Trunking Made Easy
Installation Wizard

21. SIP Trunking in Proxy Mode or B2BUA Mode
PBX
Proxy Mode
IP-PBX talks to Service
Registration/Authentication model must match
Little configuration in the IX78
Service credentials in the PBX
B2BUA Mode (Proxy still doing the basics)
IP-PBX only talks to the IX78
Wider separation between PBX and Service
Service Credentials only in the IX78
More SIP Normalization possibilities (e.g. REFER)
Any new operator service platform only requires IX78 reconfiguration (the PBX configuration can remain)
IP-
PBX

22. Trunk-side Parameters (B2BUA Mode)

23. PBX-side Parameters (B2BUA Mode)

24. Registration, Call Routing, CallerID (B2BUA Mode)

25. The Many Faces of the IX78
In addition to being a router, a firewall, a wireless access point, an ADSL modem etc., the IX78 has several SIP and Telephony related functions:
SIP ATA device (2 FXS ports, 1 FXO port)
SIP E-SBC Gateway for hosted services – LAN and WLAN SIP devices have global SIP connectivity
SIP Trunking E-SBC – Connecting IP PBXs directly to operator’s SIP Telephony Services
Unique SIP support including proxy and registrar, various VoIP network architectures supported, advanced SIP and Telephony routing, built in PBX
All these functions can be used together and at the same time! 25 25

26. Add SIP Clients, Use as Basic PBX, Move on to Full PBX
Remote Users
There are many PBXs out there that do not allow Soft Clients, Remote Users or Standard SIP Phones.
PBX with non-SIP
phones
WiFi Mobile
Registrar
Numbers integrated
Soft Client
PBX
Retire the old PBX… 26

27. The PBX – Simple and Capable
Administrator’s Overview and Configuration

28. The PBX – The things you need
Personal Settings

29. Ready and In Use!
IX78 E-SBC used in volume by Sweden’s incumbant TeliaSonera
in SIP Trunking Services:
Over ADSL (built-in ADSL modem, multiple PVC)
Over Managed Internet ”Prolane” service (IP QoS)
Over Fiber LAN (multiple VLANs)
Others in progress
Ingate products are used in a wide variety of SIP Trunking installations
Ready and used for more than POTS Replacement
VoIP++ = Global IP Connectivity & All types of SIP services
Multimedia and Unified Communications
Element Managemen System - iEMS (more later)
Basics available now – Continously extended – Adaptions to operator requests
iEMS will later also be used for Ingate’s larger products
More managed services via the iEMS (SIP Trunking, PBX, Firewall, VPN) 29

30. Performance and Call Handling Capacity
Over 50 simultaneous calls (20 ms voice packets) carrying media
Call rate of 8 calls/s in proxy mode and 3 calls/s in B2BUA mode. (way above the requirement to support 24 or 50 simultaneous calls)
Up to 255 registrations. SIP end-points can be more.
CPU Usage:

31. From Conventional Services Over New Wires
Telephony TV
Internet
to The Multimedia LAN
New terminals (PCs, Mobile Phones etc) will handle everything and must get all the accesses with Reliability and Quality.
It’s time to get it together and add more! 31

32. Advanced Triple Play Architecture IMS and VoIP Services for ALL Terminals over ALL Pipes!
Internet
The Multimedia LAN
All services must be available to multimedia terminals! – Over controlled high QoS pipes as well as the Internet.
IMS
VoIP
TR-069
IP-TV
VoD
Internet
Application Innovation Requires it!
WLAN
VLANs or ADSL Virtual Circuits
The Multimedia LAN
Telepresence
PDA
Lots of new CPE requirements to meet 

33. IX78 Architecture and Functionality
A user attractive architecture for multimedia services and terminals.
Plug-in compatible CPE, without changed network architecture!
All services on different WAN-pipes made available to all terminals on a single LAN / WLAN
All QoS advantages preserved from the conventional port the based architecture
Network clouds may be NATed or in the public address space
Firewall protection on all WAN pipes (PVCs, VLANs etc.)
QoS based routing, in addition to traditional address based routing
Special IP TV requirements
IGMP proxy for multicast IP-TV, with fast leave and multi- to unicast conversion
RTSP proxy for VoD (Video on Demand)
Horsepower and intelligent packet dropping to maintain priority on critical video streams
Full SIP Based Live IP Communication Support
Much more than POTS replication via FXS ports
Full support for SIP on LAN and globally, without unreliable work-around methods
QoS applied to all SIP signaling and media – No client setup required
SIP clients can use either Quality Assured operator service or the Internet. SIP communication can be separated and routed universally, with best QoS on each network
Support for all SIP services (not just telephony)
Equal treatment and full connectivity between telephony ports (FXS), LAN or WLAN connected clients as well as outside clients
SIP and IMS supported over the VoIP and IMS pipe as well as over the Internet and routed globally
Many want to, but only a few really do it!
Only Intertex has this unique SIP functionality! 33 33

34. Powerful Provisioning Systems
Use standardized TR-069 and TR-104 or Intertex’ provisioning - easy to integrate with existing customer handling system
Initial automated configuration to get up and running
THEREAFTER:
Continued Configuring – New or updated settings easily distributed
Firmware Upgrade – The CPE can look for new firmware releases and upgrade itself
SIP Switch
Cable, etc.
Customer Purchases – Software options, licenses and even hardware accessories, can be ordered and delivered from IG Shop. Provisioner sells to his customer as usual. Unlocking of subsidized CPE can also be sold this way. 34 34

35. The SIP Trunking Installation Wizard
jkjjk

36. Element Management System – The iEMS
Functions for Provisioning, Monitoring, Reporting, Diagnostics, Logging, Debugging, Support, Configuration and Upgrade. Available now with basic functionality.
Will handle both Ingate and Intertex Firewalls and SIParators.
Highly scalable, runs on PC servers under the Linux OS.
HTTPS/SOAP interface to the IX78. Can read and write all configuration parameters, as well as asynchronous reporting by the device (like SNMP traps).
Web based secure access to the iEMS. Customized portals for operators, installers and customers, for the purpose of administration, management and usage.
The iEMS has northbound interfaces for integrating with the operator’s OSS and Fault Management systems, using XML-RPC and/or SOAP.

37. iEMS – CDRs with Call Quality Metrics

38. Billing – CDRs for Efficient Processing
Now also with Video Call Metrics and Pipe Used!
CDRs with Call Quality Metrics – View from iEMS (our TR-69 management system)

39. OSS, Fault Management, etc.
iEMS Interfaces
<?xml version="1.0"?>
<methodCall>
<methodName>setTrunk</methodName>
<params><param><struct>
<member><name>version</name><value>1.0</value></member>
<member><name>ems</name><value><struct>
<member><name>username</name><value>installer</value> <member><name>password</name><value>foobar123</value></
</struct></value></member>
<member><name>service</name><value><struct>
<member><name>registrar</name><value>sip.intertex.se</ <member><name>proxy</name><value>proxy.intertex.se</value </struct></value></member>
<member><name>trunk</name><value>
<array><data>
<value><struct>
<member><name>identity</name><value> </val <member><name>password</name><value>foobar</value></membe
</struct></value>
<member><name>identity</name><value> </val
<member><name>password</name><value>barfoo</value>
</data></array>
</value></member>
</struct></param></params>
</methodCall>
CPE
WAN
OSS, Fault Management, etc.
Northbound API
Southbound API
WEB GUI DB
XML-RPC (or SOAP) (GET/SET/EVENTS)

40. Technology and Competence
"Intertex specialises in the development of communication and security products.“
"Extensive experience of real-time and application programming as well as analogue and digital hardware design."
Anders
Business Awards:
Challenger of the Year 1995
Rookie of the Year 1996
The Award of Electronics 1997
The Golden Mouse 1998
Trippel A (AAA) 1999 and 2000
Editor's Choice Networking EXHardware 2002
World of ADSL Golden Award 2002
Internet Telephony Product of the Year 2002
Internet Telephony Product of the Year 2003
Communication Solutions – P. of the Year 2003
European IST Prize 2004
Internet Telephony Product of the Year 2004
Pulver 100, numerous
Internet Telephony Editors’ Choice Award 2006
Best in Test Mikrodatorn 2006
Internet Telephony Product of the Year 2007, 2008 40

41. SIP Capable Firewalls and SIParators®
Thank You!
Ingate Systems Inc.
Contact: Steve Johnson
Tel:
Mob:
Intertex Data AB
Contact: Karl Stahl
Tel:
Mob:

42. Making the E-SBC do it – WAN Quality IP Network
Connects to High Quality OVCC Network and the Internet (If you wish)
Handles Multimedia and Data (If you wish) with advanced QoS
Connects via DSL (IX78 only) or Ethernet (VLAN tagged or not)
Classified traffic (Teleprecense, Voice…) takes the fine pipe
Extra High Quality WAN Interface over PVC or VLAN Ethernet
Or hook it into a separate Ethernet Interface 42

43. Making the E-SBC do it – Classify Traffic
Outgoing calls shall take the right pipe (Incoming – signaling and media - stays where it came in)
Classifying in the E-SBC Outbound Proxy is a good way
Classified traffic (Telepresence, Voice…) takes the quality pipe
Can also classify based on other criteria, e.g. IP address, DSCP bits, protocol from device
Devices registered to Internet connected ITSP
OVCC MSP1 Registered Devices
Devices Registered to own registrar/PBX 43

44. Making the E-SBC do it – QoS, Prioritization
Quality of Service setup can be easy (default in the IX78)
Or detailed as in the Ingate line 44