IWF Privacy for Business Trunking

The Oracle® Enterprise Session Border Controller supports IWF Privacy: Caller Privacy on Unsecure Networks and IWF Privacy: Caller Privacy on Secure Connections, but IWF Privacy for Business Trunking, supports the case where SIP and H.323 PBXs are connected to the core IMS system. Traffic originated at the IP PBXs terminates either at other PBXs or at the PSTN, and includes the possibility of accepting incoming traffic from the PSTN. CLIP and CLIR must be supported for calls in either direction for calls that require interworking between SIP and H.323. Unlike the two features described above, this new feature supports the fact that only a network-based application server has sufficient privilege to assert the identity of the calling party.

Thus, for this feature, the Oracle® Enterprise Session Border Controller does not force privacy. Instead, the implemented feature assumes that the H.323 session agent is an IP PB X, and the Oracle® Enterprise Session Border Controller only indicates to the SIP core that privacy is being requested. In other words, the Oracle® Enterprise Session Border Controller is not required to interwork the H.323 presentation indicator parameter to RFC 3325 by including the P-Asserted-Identity header. The indication to the SIP core that privacy is being requested excludes identity assertion.

You configure this feature using two session agent options:

  • allowCPN—Set in the egress H.323 session agent, allows the Oracle® Enterprise Session Border Controller to send the calling party number information element (IE), even when the presentation indicator is set to restricted.
  • NoPAssertedId—Set in the ingress H.323 session agent; when the incoming SETUP message has the presentation indicator is set to restricted, instructs the Oracle® Enterprise Session Border Controller to send a Privacy header without the P-Asserted-Identity and not to make the From header anonymous.

A Call Originating in H.323

This section describes for the IWF Privacy for Business trunking feature works for a call originating in H.323 that requires interworking to SIP.

When the Oracle® Enterprise Session Border Controller receives an H.323 SETUP with a presentation indicator of the calling party information element (IE) is set to restricted and this SETUP was received from a session agent is configured with the NoPAssertedID option, the Oracle® Enterprise Session Border Controller only adds the Privacy header with the value ID. In this case, there will be no P-Asserted-Identity and the From header will contain the calling Party information that was extracted from the callingPartyIE. The Oracle® Enterprise Session Border Controller assumes that the PBX will send the callingPartyNumber in the IE, even though it would like to have the calling party number restricted.

Sample SETUP Message from an H.323 Endpoint

Q.931
    Protocol discriminator: Q.931
    Call reference value length: 2
    Call reference flag: Message sent from originating side
    Call reference value: 2FB6
    Message type: SETUP (0x05)
    Bearer capability
        Information element: Bearer capability
Length: 3
        ...0 1000 = Information transfer capability: Unrestricted digital information (0x08)
        .00. .... = Coding standard: ITU-T standardized coding (0x00)
        1... .... = Extension indicator: last octet
        ...1 0011 = Information transfer rate: 384 kbit/s (0x13)
        .00. .... = Transfer mode: Circuit mode (0x00)
        1... .... = Extension indicator: last octet
        ...0 0101 = User information layer 1 protocol: Recommendation H.221 and H.242 (0x05)
        1... .... = Extension indicator: last octet
    Display  'jdoe\000'
        Information element: Display
Length: 9
        Display information: jdoe\000
    Calling party number: '42343'
        Information element: Calling party number
        Length: 6
        .... 0001 = Numbering plan: E.164 ISDN/telephony numbering (0x01)
        .000 .... = Number type: Unknown (0x00)
        0... .... = Extension indicator: information continues through the next octet
        .... ..00 = Screening indicator: User-provided, not screened (0x00)
        .01. .... = Presentation indicator: Presentation restricted (0x01)
        1... .... = Extension indicator: last octet
        Calling party number digits: 42343
        E.164 Calling party number digits: 42343
    Called party number: '780'
        Information element: Called party number
        Length: 4
        .... 0001 = Numbering plan: E.164 ISDN/telephony numbering (0x01)
        .000 .... = Number type: Unknown (0x00)
        1... .... = Extension indicator: last octet
        Called party number digits: 780
        E.164 Called party number digits: 780
User-user
        Information element: User-user
        Length: 161
        Protocol discriminator: X.208 and X.209 coded user information

Sample INVITE from the Oracle® Enterprise Session Border Controller to the SIP Endpoint

May  5 15:11:51.996 On [0:0]192.168.200.68:5060 sent to 192.168.200.6:5060
INVITE sip:780@192.168.200.6:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.200.68:5060;branch=z9hG4bK00020a20eg11s94pg700.1
Contact: "jdoe"<sip:42343@192.168.200.68:5060;transport=udp>
Supported: 100rel
From: "jdoe"<sip:42343@192.168.200.68:5060>;tag=SDetur801-00000194000e2ce8
To: <sip:780@192.168.200.6:5060>
Call-ID: SDetur801-231c7b30909ca525ce12cbfeb57754ea-06ahc21
CSeq: 2 INVITE
Privacy: id
Content-Length: 231
Content-Type: application/sdp
Max-Forwards: 70
v=0
o=IWF 2 2 IN IP4 192.168.200.65
s=H323 Call
c=IN IP4 192.168.200.65
t=0 0
m=audio 5004 RTP/AVP 8 0
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000/1
m=video 5006 RTP/AVP 31 34
a=rtpmap:31 H261/8000
a=rtpmap:34 H263/9000/1

A Call Originating in SIP

This section describes for the IWF Privacy for Business trunking feature works for a call originating in SIP that requires interworking to H.323.

When the Oracle® Enterprise Session Border Controller receives a SIP INVITE with a Privacy header that has the value ID, it sets the presentation indicator to restricted in the corresponding H.323 SETUP message. If the H.323 session agent is configured with the allowCPN option, the Oracle® Enterprise Session Border Controllersends the display IE and the calling party number to the H.323 session agent. If that option is not set in the H.323 session agent, then the Oracle® Enterprise Session Border Controller reverts to its default behavior, which is to not to send the display IE and to hide the calling party number.

Sample INVITE from a SIP Endpoint to the Oracle® Enterprise Session Border Controller

May  5 14:41:54.513 On [0:0]192.168.200.68:5060 received from 192.168.200.6:5060
INVITE sip:800@192.168.200.68:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.200.6:5060
From: sipp <sip:sipp@192.168.200.6:5060>;tag=1
To: sut <sip:800@192.168.200.68:5060>
Call-ID: 1.3068.192.168.200.6@sipp.call.id
Cseq: 1 INVITE
Contact: sip:sipp@192.168.200.6:5060
Privacy: id
P-Asserted-Identity: sipp <sip:1234@192.168.200.6:5060>
Max-Forwards: 70
Subject: Performance Test
Content-Type: application/sdp
Content-Length: 136
v=0
o=user1 53655765 2353687637 IN IP4 127.0.0.1
s=-
t=0 0
c=IN IP4       127.0.0.1
m=audio 10000 RTP/AVP 0
a=rtpmap:0 PCMU/8000

Sample SETUP from the Oracle® Enterprise Session Border Controller to the H.323 Endpoint

Q.931
    Protocol discriminator: Q.931
    Call reference value length: 2
    Call reference flag: Message sent from originating side
    Call reference value: 44B0
    Message type: SETUP (0x05)
    Bearer capability
        Information element: Bearer capability
        Length: 3
        ...1 0000 = Information transfer capability: 3.1 kHz audio (0x10)
        .00. .... = Coding standard: ITU-T standardized coding (0x00)
        1... .... = Extension indicator: last octet
        ...1 0000 = Information transfer rate: 64 kbit/s (0x10)
        .00. .... = Transfer mode: Circuit mode (0x00)
        1... .... = Extension indicator: last octet
        ...0 0011 = User information layer 1 protocol: Recommendation G.711 A-law (0x03)
        1... .... = Extension indicator: last octet
    Display  'sipp'
        Information element: Display
        Length: 4
        Display information: sipp
Calling party number: '1234'
        Information element: Calling party number
Length: 6
        .... 0001 = Numbering plan: E.164 ISDN/telephony numbering (0x01)
        .010 .... = Number type: National number (0x02)
        0... .... = Extension indicator: information continues through the next octet
        .... ..00 = Screening indicator: User-provided, not screened (0x00)
        .01. .... = Presentation indicator: Presentation restricted (0x01)
        1... .... = Extension indicator: last octet
        Calling party number digits: 1234		
        E.164 Calling party number digits: 1234
    Called party number: '800'
        Information element: Called party number
        Length: 4
.... 0001 = Numbering plan: E.164 ISDN/telephony numbering (0x01)
        .010 .... = Number type: National number (0x02)
        1... .... = Extension indicator: last octet
        Called party number digits: 800
        E.164 Called party number digits: 800
    User-user
        Information element: User-user
        Length: 159
        Protocol discriminator: X.208 and X.209 coded user information

allowCPN Configuration

You can set both of these options in the same H.323 session agent.

To set the allowCPN option for an H.323 session agent:

  1. In Superuser mode, type configure terminal and press Enter.
    ORACLE# configure terminal
  2. Type session-router and press Enter.
    ORACLE(configure)# session-router
  3. Type session-agent and press Enter. The system prompt changes to let you know that you can begin configuring individual parameters.
    ORACLE(session-router)# session-agent
  4. Use the ACLI select command so that you can work with the session agent configuration to which you want to add this option.
    ORACLE(session-agent)# select
  5. options—Set the options parameter by typing options, a Space, the option name allowCPN with a plus sign in front of it, and then press Enter.
    ORACLE(session-agent)# options +allowCPN

    If you type options allowCPN (without the plus sign), you will overwrite any previously configured options. In order to append the new option to the session-agent’s options list, you must prepend the new option with a plus sign as shown in the previous example.

  6. Save and activate your configuration.

    To set the NoPAssertedId option for an H.323 session agent:

  7. In Superuser mode, type configure terminal and press Enter.
    ORACLE# configure terminal
  8. Type session-router and press Enter.
    ORACLE(configure)# session-router
  9. Type session-agent and press Enter. The system prompt changes to let you know that you can begin configuring individual parameters.
    ORACLE(session-router)# session-agent
  10. Use the ACLI select command so that you can work with the session agent configuration to which you want to add this option.
    ORACLE(session-agent)# select
  11. options—Set the options parameter by typing options, a Space, the option name NoPAssertedId with a plus sign in front of it, and then press Enter.
    ORACLE(session-agent)# options +NoPAssertedId

    If you type options NoPAssertedId (without the plus sign), you will overwrite any previously configured options. In order to append the new option to the session-agent’s options list, you must prepend the new option with a plus sign as shown in the previous example.

  12. Save and activate your configuration.