product data sheet

www.thomson.net

Cirpack Session Border Controllera comprehensive solution for a complete trunking and access control application

the cirpack session Border controller from thomson is the carrier class sip-based solution managing the critical control functions needed to deliver trusted voice, video and real-time interactive communication sessions across ip networks.

Today many service providers deploy managed IP networks with Softswitches, and Media gateways both to reduce operational costs and also to connect these Softswitch-Gateway “islands” to expand the reach of their networks.

While VoIP technology is a cost-effective solution for transporting long-distance traffic and supporting PBX connections, an ability to provide native VoIP peering between networks which delivers high level of security and quality of service (QoS), is also required by service providers.

The Cirpack Session Border Controller provides a demarcation point between

two services providers’ networks allowing them to manage signalling and media flow, and to control the routing of traffic.

Services and facilities-based providers who offer IP interactive communication services - such as voice, video, unified messaging, conferencing, presence, gaming and multimedia collaboration - have to manage critical security and service assurance issues at the borders of their network to support residential and business customers.

The Cirpack Session Border Controller therefore offers the security mechanisms that service providers need today for their hosted IP-based

services platform and for their local loop access applications including: protection from Denial of Service (DoS) attacks, topology hiding, secured call control and media streams, and Quality of Service.

The Cirpack Session Border Controller solution delivers carrier-class availability and manageability in terms of routing and control functions for signalling protocol and media management.

It secures the subscriber’s access and IP interconnection borders and enables the interoperability of heterogeneous IP network domains to maximize user service levels by controlling admission, overload, and IP session routing.

VoIP IMS

FIxed-MobIle

conVergence

Main FunCtionS and BeneFitS

The Cirpack Session Border Controller solution offers a host of benefits for service providers:

• FlexiblesolutioncapableofsupportingNGNandIMSarchitecturefor investment optimisation

• Deploymentflexibilitybothasanaccessandasabordersolutionconnectedtomultipleplatforms:Next-GenSoftswitch,coreIMS,value-added application servers, etc…

• AccessandBordercontrollerforlocalloopandbusinessapplications including residential services, IP Trunking and IPBX-connection

• RobustsecurityandNAT/PATtraversalfunctionsaccordingtoVoIPand multimedia constraints

• Cost-effectivesolutionforCAPEXoptimisationwithacompletesolution including signalling , media service and transcoding

• HighavailabilityandpackagedsolutionforOPEXoptimisationwith a simplified network operations, provisioning and management interface, and inter-network billing

• Future-proofedsolutionwithaneasymigrationpathtotheIMS3GPP/TISPANstandards

Utilizing IBM Blade and IP-based technologies, the Cirpack Session BorderControllersolutioniscompliantwithNGNandalsowithIMSarchitecturesdefinedby3GPPIMS,ETSI/TISPANandPacketCable.

Based on Cirpack’s VoIP solution expertise, the Cirpack Session Border Controller is designed according to telecom network requirements and is composed of the following components:

•Signallingpart:CirpackAccessController(P-CSCF)andCirpackBorderSwitch(BGCF-IBCF).

•Mediastreampart:CirpackMediaProxy(C-BGF,I-BGF)whichcanbe coupled with the Cirpack Media Transcoding Gateway.

ngn

www.thomson.net

product data sheet

CiRPaCK SeSSion BoRdeR ContRoLLeR aPPLiCationS

• Robustsecurityfeatures—DoS/DDoSandinfrastructureprotection—Useraccesscontrol—Networktopologyhiding&privacy—Monitoringandreporting

• Richlevelofservices—NAT/PATmanagement— IPAddressmanagement—E.164Phonenumber&SIPURImanagement—Protocolinter-workingmanagement

• ServiceLevelAgreement—Admissioncontrol—Trafficcontrolandfailuredetection—Transportcontrol

• RoutingandBilling—CDRaccounting—Trafficrouting—Emergencycallrouting

• Multipleapplications—Useraccesscontrolandmanagement—VoiceandMultimediatrunkingmanagement

• MultipleNetworkintegrations—NGNIP-basednetwork— IMSnetwork

• Openinterfaces—CLF(ConnectivitySessionLocationandRepositoryFunction)interface—Billingsysteminterface—VirtualSBCinterface

• FullycompliantwithIMS3GPP/TISPANstandard

KeY FeatuReS

IP trunkingNetworks

Cirpack AccessController P-CSCF

Cirpack Border SwitchBGCF-IBCF

Cirpack MediaProxy C-BGF

Access Control Application Border trunking Application

Cirpack MediaProxy I-BGF

NGN & IMSCore Networks

Voice&

Mutlimedia

Cirpack Session Border Controlller

Access Controller / P-CSCF Border Switch / BGCF-IBCF

Media Proxy / C-BGF Media Proxy / I-BGF- NAT traversal management- Media topology hiding- Media Transcoding

- SIP Registration Control- Location Server

- SIP Routing- Number Portability Server

- NAT traversal management- Security mechanisms- Core network topology hiding

IP trunkingNetworks

Cirpack AccessController P-CSCF

Cirpack Border SwitchBGCF-IBCF

Cirpack MediaProxy C-BGF

Access Control Application Border trunking Application

Cirpack MediaProxy I-BGF

NGN & IMSCore Networks

Voice&

Mutlimedia

Cirpack Session Border Controlller

Access Controller / P-CSCF Border Switch / BGCF-IBCF

Media Proxy / C-BGF Media Proxy / I-BGF- NAT traversal management- Media topology hiding- Media Transcoding

- SIP Registration Control- Location Server

- SIP Routing- Number Portability Server

- NAT traversal management- Security mechanisms- Core network topology hiding

product data sheet

FunCtionS - FeatuReS

Cirpack Access Controller: P-CSCF Cirpack Border Switch: BGCF-IBCF

SeCuRitY – doS/ddoS and inFRaStRuCtuRe PRoteCtion

Protect Core Network from DoS/DDoS attack Yes Yes

Protect Core Network from non-malicious overloads Yes Yes

Ensure convergence of registration after a long network unavailability period Yes NA

Allow Authenticated/Registered users access while under DoS attack Yes Yes

Detect and prevent single user attack, blocking only that user Yes Yes

Protect Core Network from overloads by limiting the rate of requests that can reach the core network Yes Yes

SeCuRitY – uSeR aCCeSS ContRoL

Codec control, with codec authorization List Yes Yes *

Permit access to known devices or networks Yes Yes

Permit access to/from authenticated/registered users; Deny access to anonymous users Yes NA

Dynamically accept or reject traffic per-user based on user behaviours Yes Yes

SeCuRitY – netwoRK toPoLogY Hiding & PRivaCY

Hide core topology to prevent directed attacks to the core network and preserve core confidentiality Yes Yes

Mask user information for privacy and confidentiality Yes Yes

IPSec/TLS and sRTP Yes * Yes *

SeCuRitY - MonitoRing and RePoRting

SNMP traps and log generation Yes Yes

Access management is protected from unauthorized personnel Yes Yes

SeRviCeS - nat / Pat ManageMent

Enable calls to traverse NAT by discovering public/external IP addresses for signalling and media or keeping NAT pinholes open for signalling

Yes Yes

SeRviCeS – iP addReSS ManageMent

Bridge IP address spaces - private-public, private-private, public-public Yes Yes

ALG IPV4 to IPV6 translation Yes * Yes *

SeRviCeS – e.164 PHone nuMBeR & SiP uRi ManageMent

Enable prefix, suffix, wildcard and other telephone number manipulations to enhance/control session routing NA Yes

SeRviCeS - PRotoCoL inteR-woRKing ManageMent

Signalling – provides protocol normalization and inter-working for SIP to SIP, SIP to H.323 Yes Yes

Encryption – provides support and inter-working for none, TLS, MTLS, IPSec, SRTP Yes * Yes *

Transcoding – translation for wireline and wireless codec Yes Yes

SeRviCe LeveL agReeMentS - adMiSSion ContRoL

Admit sessions based upon signalling criteria Yes Yes

Interface to policy and bandwidth manager (Gq’ to RACS, Rx to PCRF, PacketCable Application Manager) Yes * Yes *

SeRviCe LeveL agReeMentS - tRaFFiC ContRoL and FaiLuRe deteCtion

Load balancing of traffic Yes Yes

Reject or divert traffic based upon destination NA Yes

Manage avalanche of SIP REGISTER messages resulting from power or network failure and ensure convergence of registration

Yes NA

SeRviCe LeveL agReeMentS - tRanSPoRt ContRoL

Assign QoS marking / VLAN mapping  Yes Yes

Release media between UE based on session timeout. Yes Yes

Release media between UE based on inactivity detection NA Yes *

Measure QoS per session (packet loss) Report QoS information to CDR Yes Yes

Routing and BiLLing- CdR aCCounting

Generate CDRs for billing or network planning Yes Yes

Add ISUP information contained in SIP-I NA Yes

Routing and BiLLing – tRaFFiC Routing

Interface to Cirpack least-cost routing to enable policy-based session control based on route cost, margin, preferences, … NA Yes *

ENUM-based routing interface NA Yes

Carrier code-based routing NA Yes

Interface to Cirpack Number Portability Database NA Yes

Large local route tables for static, localized routing decisions Yes Yes

Reselection mechanism in case of failure NA Yes

Load balancing across multiple networks Yes Yes

Specific routing/rejection mechanism for specific SIP METHOD Yes Yes

DNS RFC3263 routing Yes Yes

Routing based on ISUP information contained in on SIP-I NA Yes

Routing and BiLLing – eMeRgenCY CaLL Routing

Specific routing mechanism for emergency numbers Yes Yes

Retrieve location information for emergency sessions Yes NA

oPen inteRFaCeS

Interface to external location servers (CLF) - e2 Yes NA

Rf (Diameter) interface to billing system Yes Yes

Virtual SBC: offer to each trunking operator a different interface NA Yes

Interface to external Number Portability server (ENUM) NA Yes

Yes *: Feature planned in coming Product Roadmaps. NA: Not Applicable.

product data sheet

Our professional services offerings ensure optimal system performance and maximize uptime. These services include call centers staffed around the clock; system planning, design, and commissioning; professional training courses; and technical maintenance programs and service agreements.

www.thomson.net/support

PRoFeSSionaL SeRviCeS

Thomson Worldwide Headquarters46 Quai A. Le Gallo 92648 Boulogne Cedex FRANCE Tel. : 33 (0) 1 41 86 50 00 Fax : 33 (0) 1 41 86 56 59

HeadquaRteRS

©Copyright2009Thomson,Inc.Allrightsreserved.Alltradenamesreferencedareservicemarks,trademarks,orregisteredtrademarksoftheirrespectivecompanies.Specificationssubjecttochangewithoutnotice. CDT-4099D

oRdeRing inFoRMation

The Cirpack Border Switch Controller exists in a myriad of configurations. Please contact your usual Thomson representative for more infiormation.

SPeCiFiCationS

HardwareAccess controller and border Switch Hardware

• Active-StandbyclusterofredundantserverswithmultipleCPU,Hot-swapable,andredundantharddrive

• Carrier grade IBM Blade Center T chassis with redundant components: back plane, power supply, cooling, GigabitEthernetswitchmodules,managementmodules,hotswap

• 105-250VACor48VDC,1300W

Media Proxy and Transcoding gW Hardware

• 19’’ server with multiple CPU and redundant hard drive

• N+1redundancyusingloadsharingmechanism

• 105-250VACor48VDC

CapacityAccess controller (P-cScF)

• Upto256,000simultaneousregisteredusers(SIPURI)

border Switch (bgcF-IbcF)

• Up to 10,000 peers (interconnections)

• Upto300CAPS(CallAttemptsPerSecond)

Media Proxy

• Upto5NICS(NetworkInterfaceCard)and4096simultaneous call sessions

Transcoding gW

• Up to 1,500 simultaneous sessions based on G.711, G.723, G.729codecforAccessandTrunkingapplications

• Upto400simultaneoussessionsbasedonWB-AMR,G.722codec for high definition sound applications

IP Signalling Protocols• SIP,SIP-T(LatestRFCsupport)

• SIP-I according to ITU Q.1912.5

• H.323

• RTP

Codec Management• Transcoding:AMR-WB,G.722,G.711,G.729,G.723

• AccessandTrunking:G.711,G.729,G.723,G.726,G.722,ILBC,AMR-WB,ClearMode,SPEEX,GSM,H.261,H.263,H.264

IP Network Interface• Redundant100-1000MbpsEthernetinterfaces

• SNMPSupervisionLogsandTrapsinterfaces

Standard Compliancy• 3GPPTS23.228IPMultimediaSubsystem(IMS)-Stage2

• 3GPPTS24.229InternetProtocol(IP)multimediacallcontrolprotocol based on Session Initiation Protocol (SIP) and Session Description Protocol (SDP) -Stage 3

• 3GPPTS32.240chargingarchitectureandprinciples

• 3GPP TS 32.260 IP Multimedia Subsystem (IMS) charging

• 3GPPTS32.298Telecommunicationmanagement;Chargingmanagement;ChargingDataRecord(CDR)parameterdescription

• 3GPPTS32.299DiameterChargingApplications

• TISPAN180.001NGNRelease1-Releasedefinition

• TISPAN181.001VideoTelephonyoverNGN

• TISPAN182.006IPMultimediaSubsystem(IMS)-Stage2description

• TISPANES282.001NGNFunctionalArchitectureRelease1

• TISPANES282.007IPMultimediaSubsystem(IMS)-Functionalarchitecture

• TISPAN282.010Charging

• TISPANES283.003IPMultimediaCallControlProtocolbased on Session Initiation Protocol (SIP) and Session Description Protocol (SDP) - Stage 3

• TISPANTS182025BusinessTrunking

• PKT-SP-24-229-I05-090528IMSDeltaSpecificationsSessionInitiation Protocol and Session Description Protocol

• PKT-SP-29.228-I03-080425IMSDeltaSpecificationsIPMultimedia(IM)SubsystemCxandDxInterfaces;SignallingFlowsandMessageContentsSpecification3GPP29.228

• PKT-SP-29.229-I03-080425IMSDeltaSpecificationsCx/Dx Interfaces based on the Diameter Protocol Specification 3GPP TS 29.229

• PKT-TR-ARCH-FRM-V06-090528ArchitectureFrameworkTechnicalReport

• PKT-TR-SIP-V04-071106SIPSignallingReport

• PKT-SP-QOS-I02-080425QualityofServiceSpecification

Quante Netzwerke GmbH Ahrensburger Str. 8, D-30659 Hannover Tel: +49 (0)511 / 74 01 92 - 0 Fax: +49 (0)511 / 74 01 92 - 100 www.quante-netzwerke.de

www.quante-netzwerke.de/Service/