VoIP Project Update. Tony Danas Manager, Telecommunications Services TechKnowFile 2017

Transcription

1 VoIP Project Update Tony Danas Manager, Telecommunications Services TechKnowFile 2017

2 VoIP Solution Selected BroadConnect Telecom: BCT Canadian company Geographically redundant data centres located in Toronto (151 Front St) and Calgary TL9000 certified Fully encrypted, hosted PBX solution based on the industry-leading Broadsoft Class 5 carrier switch platform 99.99% service uptime SLA

3 Standard features: Dial tone, voic , voic to , client portal, plus many more features Broadsoft UC One soft client for Windows, Mac & Linux (via Chrome plug-in) as well as Mobile client for ios and Android Phones and soft clients can be used virtually anywhere (e.g. any department network, at home, in a hotel, other Universities) Minimal changes to a department s network infrastructure required Supports 5 digit dialing for 946 and 978 numbers Full-featured, hosted Call Centre solution available at extra cost

4 Virtual User+ vs Standard vs Premium User Virtual User+ allows a UofT phone number to be forwarded to a cellphone and also allows the individual to make outbound calls from their cellphone showing their UofT caller id. Primary difference between Standard and Premium User is that the Premium User includes collaboration tools such as Instant Messaging, My Room personal conference bridge, Video calling, Desktop Sharing, and Presence.

5 Preparing for VoIP A Technical Primer

6 VoIP Telecommunication Services Voice-over-IP Information Line

7 Powering the Phones Power over Ethernet (PoE) The Wall Wart

8

9

10

11

12

13 D-Link DGS P Gigabit PoE Switch = $154 ($22 per phone for 7 PoE phones with 1Gb uplink port)

14 7 x Polycom 48Vdc Wall Warts = $210 ($30 per phone plus one AC power outlet for each)

15 The Polycom VVX 311 & VVX 411

16 The Polycom VVX 311 & VVX 411 VVX 311 Two-port gigabit Ethernet switch 10/100/1000Base-TX Ports NAT Support Grayscale LCD (208 x 104) VVX 411 Two-port gigabit Ethernet switch 10/100/1000Base-TX Ports NAT Support Colour LCD (320 x 240) Model# Model Name , VVX 311 POE $ $ $ $ $ VVX 411 POE $ $ $ $ $ VVX 601 POE $ $ $ $ $ N.B. Prices are in US Dollars and subject to changes in the exchange rate.

17 Polycom VVX 601

18 Plugging It In

19 The Headset Jack

20 ISEA Information Risk and Risk Management Assessment Penetration testing on each firmware release The embedded web server has been disabled. Unique SIP credentials are provisioned by BCT. Factory reset causes re-provisioning by BCT.

21 RFP UOT Encryption Questions Can and will the solution require by default and enforce in all cases the use of encryption for device and soft client profile (configuration data) delivery between the end-point and the provider (yes or no)? BCT Response: Yes. Can and will the solution require by default and enforce in all cases the use of encryption for ALL call content (payload) between the end-point and the provider (yes or no)? BCT Response: Yes. Can and will the solution require by default and enforce in all cases the use of encryption for ALL call signaling between the end-point and the provider (yes or no)? BCT Response: Yes.

22 Telecommunication Services will Designate a Departmental VoIP Reference Port Departmental networks vary widely in their hardware, configuration, and administration. Telecommunication Services does not presume to tell you how you should build, configure, or manage your network. You choose how you want to configure the network hardware and manage VoIP traffic in your department. When problems arise, check first to see if the problem devices work properly on the Departmental VoIP Reference Port.

23 Why We Don't Need QOS: Trains, Cars, and Internet Quality of Service Quality of Service techniques have most benefit in a narrow range as you start using all of capacity

24 What is the Packet Rate of a VoIP Call?

25 What is the Bandwidth Used by a VoIP Call?

26 Bandwidth Used Downloading Windows 10

27 VoIP Represents a Trivial Volume of Traffic 64k bps payload (G.711u Codec) srtp packets per second 100Mb Ethernet can handle over 1,000 concurrent calls. Is your uplink to the campus backbone already saturated? Then your biggest problem isn t VoIP. It s Netflix.

28 Requirements vs. Options Requirements DHCP Server IP address Gateway DNS server NTP server Options IP Address Spaces Private recommended Public wasteful but ok VLAN Campus Voice recommended Departmental Voice Workstation not recommended

29 Deployment Planning If you use the Campus Voice VLAN, you don t need to worry about firewall settings. If you use your own VLAN, test your firewall to make sure that it does not interfere with SIP registrations and other call processing. You will get your phones in advance for setup and testing. Only after you confirm that each phone is working will its number be scheduled for porting. This is to prevent the chaos that happens when numbers are ported before it has been demonstrated that each phone is working.

30 Cisco ASA Firewall Configuration (config)# policy-map global_policy (config-pmap)# class inspection_default (config-pmap-c)# no inspect sip

31 Choosing the Voice VLAN (in the order attempted by the phone) 1. Link-Layer Discovery Protocol (LLDP) - Incredibly simple to use but the switch must support it 2. Cisco Discovery Protocol (CDP) - Incredibly simple to use but the switch must support it 3. Static VLAN Assignment - Worst possible solution comes back to bite you when moving phones 4. DHCP VLAN Discovery (DVD) - options 128, 144, 157 and 191 are checked (in that order)

32 Link-Layer Discovery Protocol (LLDP) Reference (Example: HPE G PoE+ 4SFP+ EI JG936A-3115P06) lldp global enable voice-vlan mac-address f mask ffff-ff interface GigabitEthernet1/0/2 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 1102 port trunk pvid vlan 1102 voice-vlan 701 enable lldp tlv-enable med-tlv network-policy 701 poe enable

33 Cisco Discovery Protocol (CDP) Reference (Example: C2960CX Software Version 15.2(5)E1) interface GigabitEthernet0/5 description VoIP DGS-1008D dumb switch switchport access vlan 1102 switchport mode access switchport voice vlan 701 spanning-tree portfast edge spanning-tree bpdufilter enable

34 Static VLAN Assignment (Don t even think of using this method you can t) Broadconnect provisions the phones with a password that is not known to UofT. This prevents manual configuration of any of the network settings. This prevents the accidental configuration of parameters that should not be configured, like a static VLAN. This is by design.

35 DHCP VLAN Discovery (DVD) Reference (Example: 3Com Switch 4210 PWR 9-Port Software Version 3Com OS V s168) interface Ethernet1/0/1 poe enable undo lldp enable port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan port trunk pvid vlan 1102 description VoIP Trunk - Disabled LLDP

36 Assign a VLAN ID Using DHCP In deployments where it is not possible to use Cisco Discovery Protocol (CDP) or Link-Layer Discovery Protocol (LLDP) to assign a VLAN ID, it is possible to assign a VLAN ID to the phone via the departmental DHCP server. When using this method to assign the phone s VLAN ID, the phone first boots on the default VLAN, obtains its intended VLAN ID from the DHCP Offer, then continues booting (including a subsequent DHCP sequence) on the newly obtained VLAN.

37 The DVD string in the DHCP option must meet the following conditions to be valid Must start with VLAN-A= (case-sensitive) Must contain at least one valid ID VLAN IDs range from 0 to 4095 Each VLAN ID must be separated by a + character The string must be terminated by a semi colon ; All characters after the semi colon ; are ignored There must be no white space before the semi colon ; Example: option 128 ascii VLAN-A= ;

38 DHCP VLAN Discovery Boot Sequence

39 Reclaim Your Voice Jacks as Data Jacks Newer installations of voice jacks were cabled with CAT6. These voice lines, once abandoned, can be re-terminated as data jacks by re-terminating them in RJ-45 patch panels, instead of the BIX frames normally used for Centrex lines. This can replace with a data jack each migrated voice line. These jacks can be connected to PoE switches as needed.

40 OBIHAI 300 Analog Telephone Adapter (ATA) (FAX Support using the T.38 FAX Standard)

41