Audiocodes Ltd. · NASDAQ:AUDC
Audiocodes — Technical Presentation (February 2021)
47 slides from Audiocodes's technical presentation, February 2021
Slide 1: Direct Routing SBA Webinar
Direct Routing SBA Webinar Itzik Mey-Tal Erez Gabbay Roy Wizeman Training Manager, R&D Application Manager, Product Manager for AudioCodes AudioCodes Microsoft Solutions, AudioCodes AudioCodes Academy https://www.audiocodes.com/services-support/audiocodes-academy
Slide 2: Session Topics
Session Topics • Direct Routing SBA concept • SBA Hardware Platforms & Virtual appliance • Using the SBA wizard • SBA GUI • Configure the SBC for having the SBA added 2
Slide 3: Main Benefits Overview
Main Benefits Overview • New! - Available as a virtual appliance • Ensure uninterrupted Teams voice calls for HQ and branch offices • Secured SIP trunk connectivity with an embedded qualified E-SBC • Reduce footprint and power consumption by hosting multiple enterprise applications on one platform •
Slide 4: Normal Operation Mode
Normal Operation Mode Graph API sync the User and SBC 365 settings (routing policies per user, call blocking rules, caller IDs, trunk normalization rules, Internet ports, PAI headers, History- Info, etc.) to the appliance in order to be used once Firewall with Forked Invite/Options connection is not
Slide 5: Survivability Operation Mode
Survivability Operation Mode • An internet outage 365 Internet Graph API Firewall with Forked Invite/Options Messages NAT Registration User on corporate DR SBA network Certified Session Border POST Keepalive Controller(s) ITSP Corporate LAN HTTP REST signaling Network SIP signaling 5
Slide 6: Signaling in Survivability Operation Mode
Signaling in Survivability Operation Mode 365 The SBA applies the routing policy, caller ID, CDR are stored in SBA Internet LBR, normalization DB are uploaded to rules, trunk parameters Office 365 once the connection is back Firewall with NAT Registered DR SBA User Certified Session Border User on C
Slide 7: Survivability Operation Mode - Entitles Behavior
Survivability Operation Mode - Entitles Behavior • SBA • AAD Long lived token validation (valid for 24 hours) • When the internet connection is lost for more than 24 hours, PSTN calling capabilities are also lost • CDR are stored in SBA DB and uploaded to the Office 365 once the connection is back •
Slide 8: DR SBA Hardware Platforms
DR SBA Hardware Platforms • Mediant 800B DR-SBA • OSN2/OSN4/OSN6 • Mediant 800C DR-SBA • OSN8/OSN9 ( no VGA connector) • Mediant 1000B DR-SBA • OSN3B/OSN3C/OSN4/OSN4B 8
Slide 9: OSN Server Platforms (1)
OSN Server Platforms (1) OSN Platform CPU Memory Storage Interfaces OSN3C Intel® Pentium® Processor D1508 8 GB • Up to 2 hard drives (HDMX modules) 500 • 2 Gigabit Ethernet external (rear panel) 2 Cores, 3M Cache, 2.20 GB HDD or • 1 Gigabit Ethernet GHz • 120GB SSD (2 HDD can internal bus, work in R
Slide 10: OSN Server Platforms (2)
OSN Server Platforms (2) OSN Platform CPU Memory Storage Interfaces OSN8 (Denverton) Intel® Atom Processor 8G RAM 32G eMMC • 4 Gigabit Ethernet NIC’s C3558 • 1 Gigabit Ethernet 4 Cores, 2.2 GHz internal bus, connected to the Mediant OSN9 (Denverton) Intel® Atom Processor 8G RAM 16G eMMC • 1 USB 2.0
Slide 11: Virtual Appliance DR-SBA
Virtual Appliance DR-SBA • Virtual DR-SBA Specifications • CPU • 4 Cores • RAM • 8 Gb • Storage • 50Gb 11
Slide 12: Preparing SBA at Datacenter
Preparing SBA at Datacenter • An existing and operational Teams Direct Routing system • Media Bypass should be enabled • DR-SBA FQDN and Certification • Should be trusted by the end points that host the Teams client and by the SBC • Azure AD Application Registration • Create App Registration in Azur
Slide 13: Azure AD Application Registration
Azure AD Application Registration • Sign-in to Azure portal with tenant administrator user and create new App registration Registering your application establishes a trust relationship between your app and the Microsoft identity platform. The trust is unidirectional: your app trusts the Microsoft id
Slide 14: Application ID and Tenant ID
Application ID and Tenant ID Application ID also called the client ID, this value uniquely identifies your application in the Microsoft identity platform. The ID is used as part of validating the security tokens it receives from the identity platform. Copy the application ID for the SBA set up proce
Slide 15: Configure platform settings
Configure platform settings 15
Slide 16: Adding URI
Adding URI A redirect URI, or reply URL, is the location where the authorization server sends the user once the app has been successfully authorized and granted an authorization code or access token. The authorization server sends the code or token to the redirect URI, so it's important you register
Slide 17: Adding a Permission
Adding a Permission Application permissions are for service- or daemon-type applications that need to access a web API as themselves, without user interaction for sign-in or consent 17
Slide 18: Permission Achieved
Permission Achieved After adding permissions to your API, you should see the selected permissions under Configured permissions. Granted for SBA Training Granted for SBA Training Granted for SBA Training Granted for SBA Training 18
Slide 19: Application Secret
Application Secret | OC audiocodes ? SBA Training | Certificates & secrets * & Search (Ctel+/) « HB overview & Quickstart Hf wtegration assistant Manage © eranding D Authentication Certificates & secrets Token configuration > API permissions @ Expose an API 2% App roles | Preview ‘Owners Q Got feedb
Slide 20: Application Secret
Application Secret • Select either never or in 1 year or in 2 years for expiration time and description The client secret is also known as an application password. It's a string value your app can use in place of a certificate to identity itself. The client secret is the easier of the two credential
Slide 21: Login
Login • Login Via Web Browser to the DR- SBA IP with the following default credentials: • User – Administrator • Password – Pass123 21
Slide 22: DR-SBA Virtual Appliance Initial Page
DR-SBA Virtual Appliance Initial Page • Upon initial login you are prompted to enter the Virtual Edition license • The license is mandatory to install • Without the license you will not be able to proceed to the next setup wizard page 22
Slide 23: Software License Activation Tool
Software License Activation Tool • Open AudioCodes Web-based Software License Activation tool at http://www.audiocodes.com/swactivation 23
Slide 24: Welcome Page
Welcome Page QC audiocodes udiocodes # Welcome to the Direct Routing Survivability Branch Appliance (SBA) Setup Wizard ‘This wizard will uide you through the Direct Routing Survivability Branch Appliance (SBA) installation. Please follow the instructions fom the instaltation mana Make sure you have
Slide 25: Disabling NIC's Example
Disabling NIC’s Example QCaudiocodes C& audiocodes Network Interface Setup It is recommended to disable all unnecessary Network Adapters. Ethernet 4 Ethernet 5 Status: Connected Status Connected IP Address 10.21.26 IPAddress 169.254.200.155 Ethernet Ethernet 2 Ethernet 3 Status: Disconnected Status:
Slide 26: Direct Routing SBA LAN Setup
Direct Routing SBA LAN Setup 26
Slide 27: Changing the Local Administrator Password
Changing the Local Administrator Password The default password is “Pass123” which is recommended to change. You can skip this step if you wish to retain the old password. 27
Slide 28: Setting Date and Time
Setting Date and Time Set the correct date/time/time zone – be sure that you have access to NTP . You can skip this step if the date/time are already set 28
Slide 29: Joining to Domain
Joining to Domain You can join to the domain if its required – the Teams SBA can run in Workgroup mode as well. This step is optional. 29
Slide 30: Tenant Credentials
Tenant Credentials You can alternatively supply Tenant ID instead Teams Admin credentials In case you enter tenant Admin/Password, click Login credentials (this may take some time). Once successfully logged in, a short message notification that you have logged in successfully is displayed and tenant
Slide 31: FQDN Setting
FQDN Setting In case you logged in without supplying the In case you wish to select the Teams SBA FQDN that Teams admin username and password you will has already been defined on Teams directly via the need to enter the FQDN manually without the PowerShell. option to add/select directly from the ten
Slide 32: Teams DR-SBA Certificate
Teams DR-SBA Certificate • The CA that is used must be trusted by the Teams clients and the SBC • In case a Private CA is used, you need to verify that its CA is installed on the DR SBA • Certificate must include the SBA FQDN in the certificate CN and in the SAN • You can assign a Wildcard certifica
Slide 33: Import Certificate
Import Certificate (@Cousiocodes Request, Install or Assign Direct Routing SBA Certificates This step stosts the Certificate Wizard, Create certificate request fr local system. Install, and assign Certificate for this system based on the topology deffation. ‘Solect a Skype for Business Server Certif
Slide 34: Assign certificate
Assign certificate QCaudiocodes CCaudiocodes Mg wirsof Tea: WIN-KIDEHINED22 —_\adminstrator Request, Install or Assign Direct Routing SBA Certificates This step starts the Certificate Wizard, Create certificate request for local system. Install, and ossign Certificate fr this system based on the top
Slide 35: Application ID and Application Secret
Application ID and Application Secret • Enter the Application ID and application secret received during the App Registration previously defined on Azure AD 35
Slide 36: DR-SBA is Ready
DR-SBA is Ready QCaudiocodes xX audiocodes x Microsoft Teams Congratulations You have successfully completed the Direct Routing Survivability Branch Appliance (SBA) Configuration Wizard. mi d 36
Slide 37: SBA Application Initial page
SBA Application Initial page Menu bar Access to SBC (not applicable on Virtual edition). DR SBA computer name (defined when joining the domain). If General DR SBA Details clicked, a pop-up appears displaying system information. Navigation pane Displays the currently logged-in username. Logout Opens
Slide 38: SETUP Menu (1)
SETUP Menu (1) change the login password of the configure the SBA server's configure SNMP-based communication administrator who is currently logged date and time. between the DR SBA and AudioCodes into the SBA Management Interface. One Voice Operations Center (OVOC). 38
Slide 39: SETUP Menu (2)
SETUP Menu (2) configure the DR SBA certificate. By default, any IP address can access Pay attention to which IP address/subnet you specify. You can accidently block access to the SBA. If this the Web and RDP (Any option) occurs, use the screen and keyboard to connect to the SBA locally and open the
Slide 40: Viewing General SBA Server Statistics
Viewing General SBA Server Statistics 40
Slide 41: Restarting SBA Server
Restarting SBA Server • Stopping and Starting SBA Services 41
Slide 42: Configuring Syslog
Configuring Syslog • Enable logs to sent to a Syslog server 42
Slide 43: Restoring SBA to Factory Defaults Remotely
Restoring SBA to Factory Defaults Remotely • You can restore the DR SBA to factory defaults by using the DR SBA Management Interface to remotely soft-burn the image of the SBA (instead using the USB) • By default the image on the D:\ partition will be used • If you want to burn a different DR SBA im
Slide 44: SBC Setup (for common Enterprise topology)
SBC Setup (for common Enterprise topology) • Setup the SBC for Teams Direct Routing support with media bypass and validate that it works for incoming and outgoing calls before modifying the following tables • Proxy Set • IP Group • IP profile (same profile as used for Teams IP Group) • IP to IP rout
Slide 45: Migrating from Skype for Business to Teams
Migrating from Skype for Business to Teams AudioCodes offers a migration path from Skype for Business SBAs and CCE devices to DR SBA (device dependent) • Early Bird Promotion - special prices for: • New Direct Routing SBA customers • Existing Skype for Business SBA or CCE customers looking to upgrad
Slide 46: | CE audiocodes
| CE audiocodes 46
Slide 47: Thank You
Thank You Stay in the loop ¥) @) (in) @)