Media Manager Configuration

You can configure the following media-manager objects from the Configuration tab on the Web GUI:

codec-policy	Create a codec policy to specify allowed codecs, the order of codecs, and codecs to add on egress.
dns-alg-constraints	Configure and enable DNS ALG constraints.
dns-config	Configure the DNS ALG service.
media-manager	Configure media steering functions.
media-policy	Configure a media policy and ToS settings.
msrp-config	Configure and enable MSRP.
playback-config	Configure media use for playback.
realm-config	Configure a realm for media management.
realm-group	Configure realm groups for local media playback.
rtcp-policy	Configure an RTCP policy.
static-flow	Configure static network traffic flows.
steering-pool	Specify one or more ports for steering media flows.
tcp-media-profile	Configure the TCP media profile and profile entries.

Note:

Click Show Advanced in the navigation pane to display all of the Media Manager objects in the preceding list.

Codec Policy Configuration

When configuring transcoding, you must create a codec policy and associate the policy to a realm.

In the codec policy, you specify:

• Which codecs to allow and which codecs to deny within a realm.
• Which codecs to add to the SDP m= lines for an egress realm.
• The preferred order of codecs shown in an SDP m= line.
• The packetization time to enforce within a realm for transrating.

Add a Codec Policy

You can create policies to specify how the Oracle® Enterprise Session Border Controller (E-SBC) manipulates SDP offers before passing the INVITE to the end point. For example, you might want to strip or re-order codecs when the originating device sends a particular codec that the end point does not support or prefer. Or, you might want to add codecs for transcoding. To simplify SIP end point management, the E-SBC can apply global codec policy enforcement to all end points.

Use the codec-policy configuration element to specify how the E-SBC handles codecs, and which codecs you want to allow.

1. From the Web GUI, click Configuration, media-manager, codec-policy.
2. On the Add Codec policy page, do the following:

   Name	Enter a unique name for this policy.
   Allow codecs	Create a list of one or more codecs that this policy allows. Use the asterisk (*) as a wildcard, the force attribute, and the no attribute, as needed. Enclose entries containing multiple values in parentheses ( ( ) ). Each codec that you add to this list requires a corresponding media profile configuration. Use the :no tag to specify exceptions. The system allows the video:no and audio:no exceptions. For example, to allow all codecs except iLBC and video, enter *iLBC:no video:no. If a codec is given a :force tag, the tag means that when the specified codec is present in the incoming offer, all non-force codes are stripped out.
   Add codecs on egress	Add the codecs that you want the E-SBC to add to an egress SDP offer, when they are not present in the offer. Each codec that you add to this list requires a corresponding media profile configuration.
   Order codecs	Create an ordered list of codecs in the order in which you want the codecs to appear in the outbound SDP offer. Use the asterisk (*) as a wildcard in different positions in the offer to reflect your configuration. Enclose entries containing multiple values in parentheses ( ( ) ).
   Packetization time (ptime)	Enter the preferred time for an outgoing SDP offer, if you plan to enable Force Ptime. Valid values: PCMU 10, 20, 30, 40, 50, 60 PCMA 10, 20, 30, 40, 50, 60 G729 10, 20, 30, 40, 50, 60 G729A 10, 20, 30, 40, 50, 60
   Force ptime	Select to force a specified packetization time on the egress offer.
   Secure dtmf cancellation	Select to remove all traces of DTMF tones at ingress making them completely silent on egress. Requires DTMF in Audio.
   Dtmf in audio	Select to handle DTMF in audio streams. Required for secure dtmf cancellation.
   Tone detection	Select to enable tone detection.
   Tone detect renegotiate timer	Set the time in milliseconds after which the system sends a re-invite, when the E-SBC has not received a re-invite from the endpoint. Default: 500.
   Reverse fax tone detection reinvite	Select to force the E-SBC to send a re-invite to a realm other than the one on which fax tone detection is enabled.

3. Save and activate the configuration.

Configure DNS ALG Constraints

You can limit throughput bound for DNS ALG by using the dns-alg-constraints configuration element. The system performs message throttling on request messages, and the responses are automatically throttled because DNS-ALG is transaction stateful. The system displays a list of configured dns-alg-constraints in the DNS Config dialog, which allows you to create constraint profiles and apply them to multiple DNS configuration objects.

This procedure requires you to enter rate and time constraints, which you might want to determine in advance. Note that 0 (zero) means unlimited.

1. From the Web GUI, click Configuration, media-manager, Show advanced, dns-alg-constraints.
2. On the DNS ALG Constraints page, click Add.
3. On the Add DNS ALG Constraints page, click Show advanced, and do the following:

   Name	Enter a unique name for this constraint.
   State	Select to enable.
   Max burst rate	Range: 0-4294967295 requests per second. 0 = unlimited.
   Max sustain rate	Range: 0-4294967295 requests per second. 0 = unlimited.
   Max inbound burst rate	Range: 0-4294967295 requests per second. 0 = unlimited.
   Max inbound sustain rate	Range: 0-4294967295 requests per second. 0 = unlimited.
   Max outbound burst rate	Range: 0-4294967295 requests per second. 0 = unlimited.
   Max outbound sustain rate	Range: 0-4294967295 requests per second. 0 = unlimited.
   Time to resume	Range: 0-4294967295 seconds to wait after the constraints are exceeded to resume monitoring the constraints . 0 = unlimited.
   Burst rate window	Range: 0-4294967295 seconds over which to compute the burst rate. 0 = unlimited.
   Sustain rate window	Range: 0-4294967295 seconds over which to compute the sustain rate. 0 = unlimited.
   Max latency	Range: 0-4294967295 seconds maximum time for the round trip. 0 = unlimited.

4. Click OK.
5. Save the configuration.

• Apply the constraint to a DNS configuration.

Configure DNS

Use the dns-config element to configure the DNS ALG service.

• Configure a DNS ALG constraint, if you want to apply one to this DNS configuration.
• Configure a server realm, if you want to add server DNS attributes.

Configure DNS for Application Gateway Service (ALG) per client, per realm.

1. From the Web GUI, click Configuration, media-manager, Show advanced, dns-config.
2. On the Add DNS Config page, to the following:

   Client realm	Select the realm from the drop-down list from which the system receives DNS queries.
   Description	Enter a description of this configuration.
   Constraint name	Select a DNS-ALG constraint from the drop-down list to apply to this configuration.
   Trap on status change	Select to enable.
   Extra dnsalg stats	Select to enable.
   Client address list	Click Add to add one or more client address lists, and do one of the following: Click OK. Click Apply/Add another, add another client address list, and click Click OK. Repeat as needed.
   Server DNS attributes	Click Add to add server DNS attributes, and do the following: Server realm. Select the server realm from the drop-down list. Domain suffix. Click Add, add a domain suffix list and click OK, or add another domain suffix list, click OK, and repeat as needed. Server address list. Click Add, add a server address list and click OK, or add another server list, click OK, and repeat as needed. Source address. Enter the source IPv4 address. Source port. Enter the source port. Range: 1025-65535. Transaction timeout. Enter the time in seconds for the DNS transaction timeout. Range: 0-999999999. 0 = unlimited. Address translation. Click Add, enter the Server Prefix and Client Prefix, and click OK. Repeat as needed. Click Back. Click Back.

3. Save the configuration.

Configure Media Manager

Use the media-manager element to define parameters used in the media steering functions performed by the Oracle® Enterprise Session Border Controller, including the flow timers.

1. From the Web GUI, click Configuration, media-manager, media-manager.
2. On the Media manager page, click Show advanced, and do the following:

   State	Select to enable Media Manager.
   Flow time limit	Enter the time limit, in seconds, for a media flow. Range: 0-4294967295.
   Initial guard timer	Enter the time limit, in seconds, for a media flow guard timer. Range: 0-4294967295.
   Subsq guard timer	Enter the time limit, in seconds, for a subsequent media flow guard timer. Range: 0-4294967295.
   TCP flow time limit	Enter the time limit, in seconds, for a TCP flow. Range: 0-4294967295.
   TCP initial guard timer	Enter the time limit, in seconds, for the initial TCP flow. Range: 0-4294967295.
   TCP subsq guard timer	Enter the time limit, in seconds, for a subsequent TCP flow. Range: 0-4294967295.
   Hnt rtcp	Select to enable RTCP for hosted NAT traversal.
   Algd log level	Select an ALGD log level from the drop-down list.
   Mbcd log level	Select an MBCD log level from the drop-down list.
   Options	Add any optional parameters.
   Red max trans	Enter the number of redundancy sync transactions to keep. Range: 0-50000.
   Red sync start time	Range: 0-4294967295.
   Red synch comp time	Range: 0-4294967295.
   Media policing	Select to enable per session traffic rate policing in a media gateway.
   Max untrusted packet rate	Enter the maximum untrusted signaling bandwidth allowed to the host path in bytes per second. Range: 20-200000.
   Max trusted packet rate	Enter the maximum trusted signaling bandwidth allowed to the host path in bytes per second. Range 20 to 200000.
   Max arp packet rate	Enter the maximum bandwidth that can be used by an ARP message. Range: 20 to 10000.
   Tolerance window	Range: 0-4294967295.
   Trap on demote to deny	Select to generate a trap when the endpoint is demoted from untrusted to deny.
   Trap on demote to untrusted	Select to generate a trap when the endpoint is demoted from trusted to untrusted.
   Syslog on demote to deny	Select to generate Syslog when the endpoint is demoted from untrusted to deny.
   Syslog on demote to untrusted	Select to generate Syslog when the endpoint is demoted from trusted to untrusted.
   Anonymous sdp	Select to enable the Use Name and Session Name fields in Session Description Protocol (SDP).
   Translate non rfc283 event	Select to accept UII/INFO events for Inter-working Function (IWF), although RFC2833 is preferred.
   Syslog on call reject	Select to enable Syslog on SIP call rejection.

3. Click OK.
4. Save the configuration.

Generate an RTCP Receiver Report

When you want to generate a Real-Time Transport Control Protocol (RTCP) Receiver Report separately from the default Sender-Receiver Report (RFC 3550), for example to encapsulate the receiver statistics differently, add the xcode-gratuitous-rtcp-report-generation option in the media-manager configuration. After you add the option and reboot the system, the E-SBC runs RTCP Receiver Reports for all media sessions that generate RTCP from DSPs.

When you add the xcode-gratuitous-rtcp-report-generation option, be sure to type the + character before the option. The + character appends the new option to the realm configuration's options list. Without the + character, the system overwrites any previously configured options.

1. Access the media-manager object.
   Configuration, media-manager, media-manager.
2. Go to the Options parameter, and do the following.
   1. Click Add.
   2. In the Add dialog, enter + xcode-gratuitous-rtcp-report-generation.
   3. Click OK.
3. Save and activate the configuration.
4. Reboot the system.

Configure Media Policy

Use the media-policy element to configure the Type of Service (TOS) and Differentiated Services (DiffServ) values that define a type or class of service. Apply the media policy to one or more realms.

In the following procedure, you can enter any of the media types defined by the Internet Assigned Numbers Authority (IANA). For example, audio, example, image, message, model, multi-part, text, and video. You can enter any of the sub-media types defined by the IANA for a specific media type. For example, for the Image media type, you can use the sub-type jpeg. (image/jpeg)

1. From the Web GUI, click Configuration , media-manager, media-policy.
2. On the media policy page, click Add.
3. On the Add media policy page, do the following:

   Name	Enter a name for this media policy.
   TOS settings	Click Add.
   Add media policy / tos settings	Media type. Enter any IANA-defined media type to use for this group of TOS settings. Range: 1-255 characters. Not case-sensitive. Media sub-type. Enter any IANA-defined media sub-type for the media type. Range: 1-255 characters. Not case-sensitive. Tos value. Enter a list of TOS values for this policy. You can specify one or more audio media types and one or more video med a types. Use decimal (0.0) or hexadecimal number (0x00) format. Default is hexadecimal. Media attributes. Click Add, and enter a list of one or more media attributes to match in the Session Description Protocol (SDP). Range: 1-255 characters. Case-sensitive. When entering more than one media attribute value, enclose the entry in quotation marks, for example, "<attribute>". Do one of the following: Click OK. Click Apply/Add another, add another media attribute, and click OK. Repeat, as needed.

4. Click OK.
5. Save the configuration.

Configure a Realm

Use the realm-config element to configure a realm for the Oracle® Enterprise Session Border Controller (E-SBC).

• Configure a physical interface.
• Configure a network interface.
• If you use Quality of Service (QoS), confirm that QoS is enabled on the E-SBC.

Note:

In Expert mode, in a table that contains the Realm ID column, you can click a cell in the column to view the realm configuration.

1. From the Web GUI, click Configuration, media-manager, realm-config, Add.
2. On the Add Realm Config page, click Show advanced and do the following:

   Identifier	Enter the name of the realm.
   Description	Enter a description of this realm.
   Addr prefix	Enter the IPv4 or IPv6 address and subnet mask combination to set the criteria the E-SBC uses to match packets sent or received on the network interface associated with this realm.
   Network interfaces	Enter the physical and network interfaces through which this realm can be reached for ingress and egress traffic. Entries in this parameter take the form: (network-interface-ID):(subport). Only one network interface is allowed per realm-config object.
   Mm in realm	Select to enable steering media through the E-SBC, when the communicating endpoints are located in the same realm.
   Mm in network	Select to enable the E-SBC to trust media within realms with the same subnet mask as theE-SBC.
   Mm same ip	Select to enable media managing for endpoints behind the same IP address.
   QoS enable	Select to enable the use of QoS in this realm.
   Max bandwidth	Enter the maximum bandwidth for dynamic flows to and from this realm in kilobits per second.
   Max priority bandwidths	Enter the maximum priority bandwidth for dynamic flows to and from this realm in kilobits per second.
   Parent realm	Enter the parent realm, if this is a nested realm.
   DNS realm	Enter the name of the DNS realm for this realm.
   Media policy	Select a default media-policy on a per-realm basis. This parameter must correspond to a valid name entry in a media policy element.
   Media sec policy	Enter the name of the default media security policy.
   Srtp msm passthrough	Select to enable the inclusion of information for multi-system SRTP passthrough.
   Class profile	Enter the name of class-profile to use for this realm for ToS marking.
   In translationid	Enter the name of a session-translation element. Only one is allowed.
   Out translationid	Enter the name of a session-translation element. Only one is allowed.
   Average rate limit	Enter the average data rate limit in bytes per second.
   Access control trust level	Select a trust level for the host within the realm.
   Invalid signal threshold	Enter the allowed invalid signalling message rate within the tolerance time period.
   Maximum signal threshold	Enter the allowed signalling message rate within the tolerance time period.
   Untrusted signal threshold	Enter the maximum number of untrusted signalling messages within the tolerance time period.
   NAT trust threshold	Enter the number of endpoints behind the NAT device that must be denied.
   Max endpoints per NAT	Enter the maximum number of endpoints allowed behind a NAT device.
   NAT invalid message threshold	Enter the allowed number of invalid messages from behind a NAT device.
   Wait time for invalid register	Enter the time period, in seconds, for the E-SBC to wait before counting the absence of the REGISTER message as an invalid message.
   Deny period	Enter the number, in seconds, for the time period to block denied dynamic entries.
   Untrust cac failure threshold	Enter the maximum number of untrusted CAC failures in the time period.
   Subscription id type	Select a subscription ID type from the drop down list.
   Early media allow	Select the early media handling policy from the drop down list.
   Enforcement profile	Select the enforcement profile from the drop down list.
   Additional prefixes	Select or add an additional address prefix to use. Omit the number of bits for an exact match.
   Restricted latching	Select a restricted latching mode.
   Options	Enter optional features and parameters. Click Add, and enter an option. Do one of the following: Click OK. Click Apply/Add another, add another media attribute, and click OK. Repeat, as needed.
   SPL options.	Enter SPL options. Click Add, and enter an SPL option. Do one of the following: Click OK. Click Apply/Add another, add another media attribute, and click OK. Repeat, as needed.
   Delay media update	Select to enable media update delay support for this realm.
   Refer call transfer	Select the refer call transfer mode for this realm.
   Hold refer reinvite	Select to enable the hold-refer-reinvite option.
   Refer notify provisional	Select provisional mode for sending a NOTIFY message from the drop down list.
   Dyn refer term	Select to enable terminating refer call transfer for this realm.
   Codec policy	Select the codec policy mode for this realm from the drop down list.
   Codec manIP in realm	Select to enable codec manipulation support for this realm.
   Codec manIP in network	Select to enable codec policy in this network.
   RTCP policy	Select the RTCP policy for this realm.
   Constraint name	Select the name of a constraint for this realm from the drop down list.
   Call recording server ID	Enter the name of the call recording server.
   Session recording server	Select a recording server or recording server group.
   Session recording required	Select to enable session recording for this realm.
   QoS constraint	Enter the name of a QoS constraint.
   TCP media profile	Select a TCP media profile for this realm.
   Monitoring filters	Add a comma-separated list of monitoring filters for this realm.
   Node functionality	Select a node function from the drop down list.

3. Click OK.
4. Save the configuration.

Configure a Steering Pool

Use the steering-pool element to define sets of ports used to steer media flows through the Oracle® Enterprise Session Border Controller to provide packet steering to ensure a level of quality or a routing path.

• Configure and name the network interface to which you want to steer media.

In the following procedure, the combination of IP address, start port, and realm ID, must be unique.

1. From the Web GUI, click Configuration, media-manager, steering-pool.
2. On the Steering pool page, do the following:

   IP address	Enter the IP address of the generated pool.
   Start port	Enter the port number that begins the range of ports available to this steering pool. Range:1-65535.
   End port	Enter the port number that ends the range of ports available to this steering pool. Range:1-65535.
   Realm id	Select the realm from the drop-down list from which media flows are allowed for this steering pool.
   Network interface	Select the network interface from the drop-down list to which this steering pool directs media.