A TLC srl

Via 1° Maggio, 26 / 60131 Ancona (Italy)

Phone +39 071 250651 / Fax +39 071 2506518
www.aethra.com - [email protected]

All-in-One Device
Session Border
Controller is a software
feature included in the
Aethra
Telecommunications
Routers / Integrated
Access Devices and
Universal CPEs.

A fully integrated
device reduces space
and power
consumption; multiple
network functions
residing in the same
hardware optimize
service deployment
and management APPLICATION BRIEF
procedures.
Aethra Telecommunications®
VoIP Security
SBC allows secure Session Border Controller
Real Time
Communications; Why a Session Border sessions in order to be able to guarantee
flexibility to enterprises adopting new
Service Providers can Controller technologies in their transition to voice
cloud services.
offer VoIP features to Voice over Internet Protocol (VoIP) is fast
replacing the Public Switched Telephone
their customers without
fear of service theft, toll
Network (PSTN) and is the standard of
Real-Time Communications (RTC) and
Network Separation
fraud or DoS attacks. Unified Communications (UC). and Security
In order to grant VoIP security in case a
By its very nature, VoIP is an application device in the customer network needs to
Sip Interoperability that connects devices and networks that connect to the Service Provider
Guaranteeing SIP aren’t fully under control of the Service environment, the two networks need to be
Provider network itself, exposing it to new separated.
interoperability risks.
between the network The SBC hides the core network topology
and the ever growing Even last generation firewalls cannot by acting as a back-to-back user agent
properly secure a Unified (B2BUA), where every SIP session is
number of available Communications environment residing on divided in two distinct segments: one
solutions on the market both sides of the network. Flexibility is between the endpoint and the SBC and
(IP PBX, IP Phones...) indeed needed for a successful the other between the SBC and the
deployment of a distributed network which Service Provider server.
can be easily managed includes devices owned by the customer.
using by SBC. Moreover, the Aethra telecommunications
SBC is a software option available on the SBCs can use transport layer security
Aethra Telecommunications (TLS) and SRTP to encrypt signaling traffic
A TLC srl
IADs and Universal CPEs. It is designed and media packets.
Via 1° Maggio, 26 for Service Providers who offer either SIP
60131 Ancona (Italy)
Phone +39 071 250651 Trunking or IP Centrex services to their In particular when the customer endpoints
Fax +39 071 2506518 customers. do not support TLS or SRTP, SBC can
www.aethra.com
[email protected] Both scenarios need to secure RTC manage and add security so that every
communication in the Service Provider Service Providers VoIP infrastructure. SBC platform which guarantees local
Network is encrypted. calling capabilities to them.
LOCAL IP-PBX SCENARIO
In the IP-PBX trunking scenario the In a two-steps registration the customer
SIP Interoperability Service Provider Network is kept fully SIP phones are registered in the local
and Transcoding separated from the customer network. interface; the SBC originates then new
registrations to the hosted IP PBX and can
Interoperability bewtween the customer’s This is needed for example to avoid the operate full voice network separation,
IP PBX / IP Phones and the Service necessity to share the VoIP credentials media transcoding and signaling
Provider SIP infrastructure is always key in with the customer: SIP authentication adaptation.
the deployment of Enterprise Voice towards the network is fully managed by
Services. the access device and not the IP PBX.
BG and SV Series
SBC allows to modify and adapt SIP IP CENTREX SCENARIO
headers in order to ensure compatibility In the IP Centrex Scenario the IP PBX is Business Routers
between different devices, different
software version and different vendors.
hosted in the cloud by the Service
Provider and customers only own SIP
and XV8800 Series
The transcoding capablity gives to the
phones and endpoints which are
connected to the network.
Universal CPEs
Service Provider the possibility to fully SBC is available on BG and SV Series
control which codecs are used in each SBC supports different IP Centrex Routers / Integrated Access Device and
side of the network and if required, to topologies, including direct and two-steps on the XV8800 Series Universal CPE
decode and then re-encode the voice registrations to the hosted IP PBX platform, see Table 1 for licensing options
signal as it crosses the SBC. platform, and works like a back-to-back and capabilites.
user agent (B2BUA) to maintain full
System can be configured to either drop session state with endpoints and service On the Universal CPE platforms, the SBC
un-wanted codecs in the network or platforms. Application is designed to run alongside
re-encode voice flows while maintaining other VNFs (like vFirewalls, vPBX and
audio quality. In a direct registration scenario SD-WAN clients).
IP phones are registered directly on the
hosted PBX, and the SBC is used to Cores and resources can be dedicated
Application Scenarios provide a local survivability. and reserved to each application, with
The SBC software is designed to support When network connectivity fails, linear performances results with cores
different scenarios according to the endpoints fallback their registrations to the availability (i.e. number of trascoded calls).

VOICE OVER IP VOICE OVER IP

SIGNALLING SIGNALLING
+ MEDIA + MEDIA

Customer IP PBX Aethra Telecommunications Voice Network

BG Series / SV Series Access Router

CUSTOMER OPERATOR

Fig. 1: Aethra Telecommunications SBC on BG Series in IP-PBX trunking service.

SBC …

VOICE OVER IP VOICE OVER IP

SIGNALLING SIGNALLING
+ MEDIA + MEDIA

Customer IP PBX Aethra Telecommunications Voice Network

XV8800 Series Universal CPE

CUSTOMER OPERATOR

Fig. 2: Aethra Telecommunications SBC on XV Series in IP-PBX trunking service.

Resource allocation can be dynamically device that still exist in the customer (from ADSL to SHDSL to VDSL2 -
assigned to each application and VNF to network and garantee the automatic falling including the new 35b profile), Fiber,
permit service upselling to the end-user, back to the PSTN service in case the Ethernet and mobile 3G/LTE.
like for example adding the capability to main SIP trunks become unavailable.
transcode a larger number of voice The devices support multiple WAN
channel upon request. connectivities and multi SIP Trunks that
Multi WAN Resiliency ensure access backup and load balance.

Embedded ATA and Multi Trunk Sip

Aethra Telecommunications offers a wide
and PSTN Fallback range of fixed and mobile broadband
Aethra Telecommunications Routers and access options.
Integrated Access Devices include
embedded analog FXS / FXO and ISDN Integrated Access Devices and Routers
voice interfaces to connect any legacy can be equipped with all flavours of DSL

SBC …
Hosted PBX

Voice Network
SIP
SIGNALLING

IP Phone SIP
SIGNALLING

Aethra Telecommunications
XV8800 Series Universal CPE
or BG Series / SV Series Access Router

CUSTOMER OPERATOR

Fig. 3: IP Centrex scenario with XV8800 series and direct registration on Hosted PBX.

SBC …
Hosted PBX

Voice Network

X
ORIGINAL
REGISTRATION FAILS

IP Phone LOCAL REGISTRATION

!!!
FOR SURVIVABILITY
Aethra Telecommunications
XV8800 Series Universal CPE
or BG Series / SV Series Access Router

CUSTOMER OPERATOR

Fig. 4: IP Centrex scenario with XV8800 Series. Local survivability.

SBC …
Hosted PBX

CLOUD
SIP SIGNALLING
+ MEDIA

IP Phone LOCAL
SIP SIGNALLING
+ MEDIA
Aethra Telecommunications Voice Network
XV8800 Series Universal CPE

CUSTOMER OPERATOR

Fig. 5: IP Centrex scenario with XV8800 Series. Dual step registration.

TECHNICAL • SMM (Sip Message Manipulation) • IPv4/IPv6 interworking
SPECIFICATIONS
Media Services QoS
VoIP Security • Supported Codecs • Call Admission Control (CAC)
• Built–in VoIP Firewall - G711Alaw • Bandwith management
• Detection and Prevention of VoIP attacks - G711Ulaw • DiffServ/DSCP marking
• Prevention of Denial–of–Service (DoS) - G729
• DDoS attacks - iLBC Management
• Source IP blocking - Speex • Local Management:
• TLS (Transport Layer Security) - GSM - Console port
• Access Control List (ACLs) - Opus - Extensive CLI
• Topology hiding: hiding internal SBC SIP • DMTF Relay and Conversion • Remote management:
entities details - CLI, WEB CLI
• Contact hiding Fax and Modem Support - SNMP agent (v1,v2c ,v3)
• Trusted Hosts • T.38 fax relay - TR–069* / CLI–over–TR–069*
• SRTP(Secure Real time Transport • Automatic G.711 Fax and Modem • Firmware upgrades: Local and Remote
Protocol) Pass–Through (TFTP & FTP client embedded)
• Malformed Packet Protection
SIP Routing
Signaling • Embedded routing engine
• Back–to–Back User Agent (B2BUA) • Inbound/outbound Sip routing Rule
• SIP authentication server for SBC users • Calling/Called Number translation
• User peer registration Aliases • Trunk Peer ip–based/domain–name
• SIP Registration based Method Filtering Routing Failover

MAX # TRANSCODING
PRODUCT LICENSE
OF CALLS MAX # OF CALLS

BG8544E SBC Basic 60 8

BG8500P SBC Basic 60 8

SV6044E SBC Basic 60 8

SV6000M SBC Basic 60 8

XV8800 / XV8800plus SBC Basic 60 8

Unlimited Unlimited
SV6044E SBC Full
Recommended up to 180 Recommended up to 20

Unlimited Unlimited
SV6000M SBC Full
Recommended up to 180 Recommended up to 20

Unlimited Unlimited
XV8800 / XV8800plus SBC Full
Recommended up to 180/core Recommended up to 20/core

Table 1: Session Border Controller Licenses and Features.

A TLC srl - Registered Office: Via Pierfranco Bonetti, 88/90 - 00128 Roma (Italy)
Share Capital Fully Paid: € 725.000,00 / VAT IT10652521005
071073099GB Rev.1 (19/11)