Table of Contents
- Title and Copyright Information
 - About This Guide
 - Revision History
 - 
               
               
                  
                  1
                      Getting Started
               
                  
               
               
               
- Installation and Start-Up
 - Boot Parameters
 - Setting Up System Basics
 - Using the Oracle® Enterprise Session Border Controller Image
 - Booting an Image on Your Oracle® Enterprise Session Border Controller
 - Setting Up Product-Type, Features, and Functionality
 - About the Installation Wizard
 - Configuration Assistant Operations
 - User Accounts
 - Customizing Your ACLI Settings
 
 - 
               
               
                  
                  2
                      System Configuration
               
                  
               
               
               
- Configuring The Oracle® Enterprise Session Border Controller as a Virtual Machine (VM)
 - General System Information
 - Configuring General System Information
 - System Configuration
 - Configure General System Identification
 - Configuring Connection and Debug Logging Timeouts
 - Phy-Interfaces
 - Network Interfaces
 - IP Identification (ID) Field
 - SNMP
 - Syslog and Process Logs
 - Syslog and Process Logs Configuration
 - Host Routes
 - Setting Holidays in Local Policy
 - Opening TCP Ports 3000 and 3001
 - 
                     
                     DNS on the
                        	 OCSBC
                     
                        
                     
                     
                     
- DNS Configuration
 - Retransmission Logic
 - DNS Support for IPv6
 - DNS Transaction Timeout
 - DNS Entry Maximum TTL
 - DNS-SRV Session Agent Recursion Error Handling
 - Interface and Realm Support of DNS Servers
 - DNS Re-query over TCP
 - Configurable DNS Response Size
 - Disabling Recursive DNS Queries for ENUM
 - DNS Server Status via SNMP
 
 - Persistent Protocol Tracing
 - System Access Control
 - System TCP Keepalive Settings
 - Configurable TCP Timers
 - RTP TTL
 - Bidirectional Forwarding Detection
 - RAMdrive Log Cleaner
 - Configurable Alarm Thresholds and Traps
 - Alarm Synchronization
 - Accounting Configuration
 - Stream Control Transfer Protocol Overview
 - Configuring SCTP Support for SIP
 - IPv6 Address Configuration
 - IPv6 Support for Management and Telemetry
 - IPv6 Default Gateway
 - IPv6 Link Local Addresses
 - Network Interfaces and IPv6
 - IPv6 Reassembly and Fragmentation Support
 - Access Control List Support
 - Homogeneous Realms
 - RADIUS Support for IPv6
 - NTP Synchronization
 - 
                     
                     Telephony Fraud
                        	 Protection
                     
                        
                     
                     
                     
- Telephony Fraud Protection Target Matching Rules
 - Telephony Fraud Protection File Activation
 - Telephony Fraud Protection Data Types and Formats
 - Configure Telephony Fraud Protection
 - Refresh the Telephony Fraud Protection File
 - Telephony Fraud Protection ACLI Show Commands
 - Telephony Fraud Protection verify-config
 
 
 - 
               
               
                  
                  3
                      Realms and Nested Realms
               
                  
               
               
               
- Overview
 - Realms
 - Nested Realms
 - Realm-Based Packet Marking
 - SIP-SDP DCSP Marking ToS Bit Manipulation
 - Steering Pools
 - Multiple Interface Realms
 - Media over TCP
 - Restricted Media Latching
 - Media Release Across SIP Network Interfaces
 - Media Release Behind the Same IP Address
 - Bandwidth CAC for Media Release
 - Media Release between Endpoints with the Same IP Address
 - Media Release Behind the Same NAT IP Address
 - Codec Reordering
 - Media Profiles Per Realm
 - Multiple Media Profiles
 - SIP Disable Media Inactivity Timer for Calls Placed on Hold
 - Media Manager Configuration for Virtual Machines (VM)
 
 - 
               
               
                  
                  4
                      SIP Signaling Services
               
                  
               
               
               
- About the Oracle® Enterprise Session Border Controller and SIP
 - Configuring the Oracle® Enterprise Session Border Controller for SIP Signaling
 - Home Realm
 - SIP Interfaces
 - 
                     
                     Diversion Info and History-Info
                        		Header Mapping
                     
                        
                     
                     
                     
- History-Info and Diversion Header Interworking Operations
 - History-Info to Diversion Header Interworking
 - Diversion to History-Info Header Interworking
 - Mapping the History-Info Cause Parameter
 - Anonymization of History and Diversion Information
 - Diversion and History-Info Headers Interworking Configuration
 - History-Info Cause 380 Parameter Interworking Configuration
 - Anonymize History Configuration
 
 - Recurse 305 Only Redirect Action
 - Embedded Routes in Redirect Responses
 - SIP PRACK Interworking
 - Global SIP Timers
 - SIP Timers Discreet Configuration
 - Session Timer Support
 - SIP Per-User CAC
 - SIP Per-Realm CAC
 - SIP Options Tag Handling
 - Replaces Header Support
 - SIP Options
 - SIP Security
 - Digest Authentication with SIP
 - SIP NAT Function
 - SIP Realm Bridging
 - SIP Hosted NAT Traversal (HNT)
 - Keep-Alive with CR LF 2832
 - SIP Registration Local Expiration
 - Simultaneous TCP Connection and Registration Cache Deletion
 - SBC Incorrectly Appends Cookie in SIP REGISTER Message
 - SIP HNT Forced Unregistration
 - Adaptive HNT
 - SIP IP Address Hiding and NATing in XML
 - SIP Server Redundancy
 - Administratively Disabling a SIP Registrar
 - Surrogate Agents and the Oracle® Enterprise Session Border Controller
 - Surrogate Registration
 - Routing Calls from an IP-PBX using a Surrogate Agent
 - Surrogate Agent Refresh on Invalidate
 - Configure Surrogate Registration
 - SIP Distributed Media Release
 - Add-On Conferencing
 - SIP REFER Method Call Transfer
 - REFER-Initiated Call Transfer
 - 180 & 100 NOTIFY in REFER Call Transfers
 - SIP REFER Re-Invite for Call Leg SDP Renegotiation
 - Alterations to SIP REFER
 - SIP REFER with Replaces
 - SIP REFER-to-BYE
 - SIP hold-refer-reinvite
 - SIP Roaming
 - Embedded Header Support
 - Dialog Transparency
 - Route Header Removal
 - SIP Via Transparency
 - Symmetric Latching
 - SIP Number Normalization
 - SIP Port Mapping
 - SIP Configurable Route Recursion
 - SIP Event Package Interoperability
 - SIP Proxy Subscriptions
 - SIP REGISTER Forwarding After Call-ID Change
 - SIP Local Response Code Mapping
 - Session Agent Ping Message Formatting
 - SIP PAI Stripping
 - SIP Statuses to Q.850 Reasons
 - 
                     
                     Trunk Group URIs
                        
                     
                     
                     
- Terminology
 - Trunk Group URI Parameters
 - 
                           
                           Trunk Group URI Configuration
                              
                           
                           
                           
- Precedence Used for Trunk Group Configurations
 - Configuring SIP Manipulations
 - Setting the Trunk Group URI Mode for Routing
 - Configuring a Session Agent for Trunk Group URIs
 - Configuring a Session Agent Group for Trunk Group URIs
 - Setting a Trunk Group Context in a Realm
 - Using this Feature with a SIP Interface
 - Example 1 Adding Originating Trunk Group Parameters in IPTEL Format
 - Example 2 Adding Originating Trunk Group Parameters in Custom Format
 - Example 3 Removing IPTEL Trunk Group Names
 - Example 4 Removing Custom Trunk Group Names
 
 
 - Emergency Session Handling
 - Fraud Prevention
 - Early Media Support
 - SIP Duplicate SDP Suppression
 - SIP SDP Address Correlation
 - SDP Insertion for (Re)INVITEs
 - Restricted Media Latching
 - Enhanced SIP Port Mapping
 - SIP Registration Via Proxy
 - Dynamic Transport Protocol Change
 - SIP Privacy Extensions
 - SIP Registration Cache Limiting
 - SIP Registration Overload Protection
 - SIP Request Method Throttling
 - SIP Delayed Media Update
 - Expedited Call Leg Release for Preempted Hairpin Calls
 - SIPconnect
 - SIP Registration Event Package Support
 - SIP Event Package for Registrations
 - SIP Transport Selection
 - SIP Method-Transaction Statistic Enhancements
 - SIP TCP Connection Reuse
 - SIP TCP Keepalive
 - 
                     
                     TCP Connection Tools
                        
                     
                     
                     
- TCP and SCTP State Connection Counters
 - show sipd tcp connections
 - show sipd tcp
 - Updated Show Commands
 
 - SIP Enforcement Profile and Allowed Methods
 - P-Certificate-Subject-Common-Name to REGISTER Messages
 - Local Policy Session Agent Matching for SIP
 - STUN Server
 - SIP GRUU
 - SIP Session Timer Feature
 - DTMF Conversion Processing
 - SIP-KPML to RFC 2833 Conversion for DTMF Events
 - RFC 4028 Session Timers
 
 - 
               
               
                  
                  5
                      Signaling
               
                  
               
               
               
- H.323 Signaling Services
 - Peering Environment for H.323
 - Video-Conferencing Support
 - Overview
 - Realm Bridging with Static and Dynamic Routing
 - Global H.323 Settings
 - H.323 Interfaces
 - H.323 Service Modes
 - 
                     
                     H.323 Features
                        
                     
                     
                     
- Fast Start Slow Start Translations
 - H.235 Encryption
 - 
                           
                           RFC 2833 DTMF Interworking
                              
                           
                           
                           
- About RFC 2833
 - About H.245 UII
 - About 2833 to H.245 UII Interworking
 - Flow Control Mapping for Interworking Function (IWF) Video
 - About DTMF Transfer
 - Preferred and Transparent 2833
 - Preferred 2883 Support
 - Transparent 2833 Support
 - Basic RFC 2833 Negotiation Support
 - H.323 to H.323 Negotiation
 - Signal and Alpha Type Support
 - H.323 Endpoints
 - Translating H.245 UII to 2833 for H.323 Calls
 
 - H.323 Registration Proxy
 - H.323 Registration Caching
 - H.245 Stage
 - Dynamic H.245 Stage Support
 - H.323 HNT
 - H.323 Party Number-E.164 Support
 - Signaling Only Operation
 - Maintenance Proxy Function
 - Applying TCP Keepalive to the H.323 Interface
 - Automatic Gatekeeper Discovery
 - H.323 Alternate Routing
 - H.323 LRQ Alternate Routing
 - H.323 CAC Release Mechanism
 - H.323 Per-Realm CAC
 - H.323 Bearer-Independent Setup
 - TOS Marking for H.323 Signaling
 - H.323 Codec Fallback
 - H.323 TCS Media Sample Size Preservation
 - H.323-TCS H.245 Support for H.264 and G722.1
 - International Peering with IWF and H.323 Calls
 - Default OLC Behavior Changed in Upgrade
 - Options
 
 - H.323 Stack Monitoring
 - H.323 Automatic Features
 - SIP-H.323 interworking with Dynamic Payload Types
 - Video Conferencing Support for Polycom Terminals
 - ACLI Signaling Mode Configuration Examples
 - Additional Information
 
 - 6 Application Gateway Services
 - 
               
               
                  
                  7
                      IWF Services
               
                  
               
               
               
- IWF Services
 - Access Network Application
 - Networking Peering Application
 - SIP and H.323
 - IWF Service Enhancements
 - Before You Configure
 - Configure IWF
 - Topology Hiding for IWF with an Internal Home-Realm
 - DTMF Support
 - 
                     
                     RFC 2833 DTMF Interworking
                        
                     
                     
                     
- About RFC 2833
 - About H.245 UII
 - About RFC 2833 to H.245 UII Interworking
 - About DTMF Transfer
 - Preferred and Transparent 2833
 - Payload Type Handling
 - Basic RFC 2833 Negotiation Support
 - H.323 to SIP Calls
 - H.323 Non-2833 Interworking with SIP
 - How H.323 to SIP Calls Work
 - SIP INFO—RFC 2833 Conversion
 - RFC 2833 Interworking Configuration
 - DTMF Transparency for IWF
 - RFC 2833 Packet Sequencing
 - Enhanced H.245 to 2833 DTMF Interworking
 
 - SIP Tel URI Support
 - Graceful DTMF Conversion Call Processing
 - IWF Inband Tone Option
 - RFC 3326 Support
 - IWF Privacy Caller Privacy on Unsecure Networks
 - IWF Privacy Caller Privacy on Secure Connections
 - IWF Privacy Extensions for Asserted Identity in Untrusted Networks
 - IWF Privacy for Business Trunking
 - Trunk Group Documentation
 - IWF COLP COLR Support
 - Options for Calls that Require the IWF
 - Suppress SIP Reliable Response Support for IWF
 - IWF Codec Negotiation H.323 Slow Start to SIP
 - IWF H.245 Signaling Support for G.726
 - Flow Control Mapping for Interworking Function (IWF) Video
 - Customized G.729 Support
 - SIP-H.323 IWF Support for H.264 and H.263+
 - SIP-H.323 IWF in Video Conferencing Applications
 - International Peering with IWF and H.323 Calls
 - IWF Codec Renegotiation for Audio Sessions
 
 - 
               
               
                  
                  8
                      Session Routing and Load Balancing
               
                  
               
               
               
- Session Routing and Load Balancing
 - 
                     
                     Telephony Fraud
                        	 Protection
                     
                        
                     
                     
                     
- Telephony Fraud Protection Target Matching Rules
 - Telephony Fraud Protection File Activation
 - Telephony Fraud Protection Data Types and Formats
 - Configure Telephony Fraud Protection
 - Refresh the Telephony Fraud Protection File
 - Telephony Fraud Protection ACLI Show Commands
 - Telephony Fraud Protection verify-config
 
 - Routing Overview
 - Session Agents Session Groups and Local Policy
 - About Session Agents
 - SIP Session Agents
 - H.323 Session Agents
 - Session Agent Groups
 - About Local Policy
 - Add a Local Response Map
 - SIP Routing
 - H.323 Routing
 - Load Balancing
 - Configuring Routing
 - SIP Session Agent DNS-SRV Load Balancing
 - Answer to Seizure Ratio-Based Routing
 - Active Directory-based Call Routing
 - ENUM Lookup
 - ENUM Failover and Query Distribution
 - CNAM Subtype Support for ENUM Queries
 - Direct Inward Dial (DID)-Range-Based Local Routing Table (LRT)
 - LRT Entry Matching
 - LRT String Lookup
 - Directed Egress Realm from LRT ENUM
 - SIP Embedded Route Header
 - LRT Lookup Key Creation
 - Retargeting LRT ENUM-based Requests
 - Recursive ENUM Queries
 - Multistage Local Policy Routing
 - Routing-based RN and CIC
 - Codec Policies for SIP
 - QoS Based Routing
 - Using the Local Route Table (LRT) for Routing
 
 - 9 Number Translation
 - 
               
               
                  
                  10
                      Admission Control and QoS
               
                  
               
               
               
- Admission Control and QoS
 - About Call Admission Control
 - Admission Control for Session Agents
 - Aggregate Session Constraints for SIP
 - Offerless Bandwidth CAC for SIP
 - Shared CAC for SIP Forked Calls
 - Conditional Bandwidth CAC for Media Release
 - About QoS Reporting
 - Configuring QoS
 - Accounting Configuration for QoS
 - White Lists for Managing Incoming SIP Headers and Parameters
 
 - 11 Static Flows
 - 
               
               
                  
                  12
                      High Availability Nodes
               
                  
               
               
               
- High Availability Nodes
 - Establishing Active and Standby Roles
 - State Transitions
 - HA Features
 - Before Configuring a High Availability (HA) Pair
 - High Availability on the Acme Packet 1100
 - Configure the Acme Packet 1100 for HA
 - Synchronizing Configurations
 - Media Interface Link Detection and Gateway Polling
 - Signaling Checkpointing
 - Media State Checkpointing
 - HA Media Interface Keepalive
 - RTC Notes
 - Switchovers
 
 - 
               
               
                  
                  13
                      Security
               
                  
               
               
               
- Security
 - Security Overview
 - 
                     
                     Denial of Service
                        	 Protection
                     
                        
                     
                     
                     
- Levels of DoS Protection
 - About the Process
 - Trusted Path
 - Untrusted Path
 - Static and Dynamic ACL Entry Limits
 - Dynamic Deny for HNT
 - Host and Media Path Protection Process
 - ESBC Access Control
 - Media Access Control
 - Host Path Traffic Management
 - Traffic Promotion
 - Malicious Source Blocking
 - Blocking Actions
 - Protecting Against Session Agent Overloads
 - ARP Flood Protection Enhancements
 - Dynamic Demotion for NAT Devices
 - DDoS Protection from Devices Behind a NAT
 
 - 
                     
                     Configuring DoS Security
                        
                     
                     
                     
- Configuration Overview
 - Changing the Default Oracle® Enterprise Session Border Controller Behavior
 - Access Control List Configuration
 - Packet Loss Alarms for Access Control Lists
 - Packet Loss Trap for Access Control Lists
 - Host Access Policing
 - Configuring ARP Flood Protection
 - Access Control for a Realm
 - Configuring Overload Protection for Session Agents
 
 - Media Policing
 - TCP Synchronize Attack Prevention
 - 
                     
                     Transport Layer
                        	 Security
                     
                        
                     
                     
                     
- The ESBC and TLS
 - Supported Encryption
 - Minimum Advertised SSL/TLS Version
 - Signaling Support
 - Endpoint Authentication
 - Keeping Pinholes Open at the Endpoint
 - Key Usage Control
 - Reusing a TLS Connection
 - TLS Configuration Process
 - Notifications for Certificate Expiration
 - Denial of Service for TLS
 - TLS Session Caching
 - TLS Endpoint Certificate Data Caching
 - Untrusted Connection Timeout for TCP and TLS
 - Securing Communications Between the ESBC and SDM with TLS
 
 - Online Certificate Status Protocol
 - IPv6-IPv4 Internetworking
 - 
                     
                     Key Exchange
                        	 Protocols
                     
                        
                     
                     
                     
- IKEv1 Protocol
 - IKEv1 Configuration
 - 
                           
                           IKEv2 Protocol
                              
                           
                           
                           
- IKEv2 Support
 - 
                                 
                                 Configuring IKEv2 Interfaces
                                    
                                 
                                 
                                 
- Debugging IKEv2 IPsec Tunnel Establishment
 - Configure an IKEv2 Interface
 - IPsec Security Policy Configuration
 - IPSec SA Rekey on Sequence Number Overflow
 - Pre-Populated ARP Table
 - Configure Dead Peer Detection
 - Certificate Revocation Lists
 - Online Certificate Status Protocol
 - Enable Certificate Verification on an IKEv2 Interface
 - Threat Protection
 - Threshold Crossing Alert Configuration
 - IKEv2 Interface Management
 
 
 
 - Secure Real-Time Transport Protocol
 - Secure Real-Time Protocol (SRTP) for Software
 - Secure and Non-Secure Flows in the Same Realm
 - HMU Support for RTP to SRTP Interworking
 - Multi-system Selective SRTP Pass-through
 - IPSec Support
 - IDS Reporting
 - IDS Phase 2 (Advanced Reporting)
 - Maintenance and Troubleshooting
 
 - 
               
               
                  
                  14
                      Transcoding
               
                  
               
               
               
- Transcoding Resources
 - Transcoding Processing Overview
 - Transcoding Configuration
 - Codec Policy Configuration
 - Default Media Profiles
 - Media Type Subnames
 - Codec and Conditional Codec Policies for SIP
 - Pooled Transcoding
 - EVRC Family of Codecs
 - Opus Codec Transcoding Support
 - SILK Codec Transcoding Support
 - Comfort Noise Transcoding
 - T.140 to Baudot Relay
 - AMR-NB and AMR-WB Specifications
 - EVS Codec Transcoding Support
 - Asymmetric Dynamic Payload Types Enablement
 - Simultaneous Payload Type Mapping for Audio and DTMF
 - DTMF Indication over HD Audio Codecs
 - RFC2833 and KPML Interworking
 - FAX Detection
 - Maintenance and Troubleshooting
 - Transcoding Capacity Traps
 - SRTP and Transcoding
 - Generating RTCP
 - SNMP
 - Acme Packet 6300 NIU Hotswap Guidelines
 
 - 
               
               
                  
                  15
                      DTMF Transfer and Support
               
                  
               
               
               
- DTMF Interworking
 - DTMF Transfer Processing Overview
 - Capability Negotiation
 - Translation Evaluation
 - Dual Mode
 - Identical Inband with Signaling DTMF Transfer Exception
 - DTMF Transfer for Spiral Calls
 - DTMF Transfer Hardware Processing
 - DTMF Transfer Configuration
 - RFC 2833 Customization
 - RFC2833 and KPML Interworking
 
 - 16 Personal Profile Manager
 - 17 STIR/SHAKEN Client
 - 
               
               
                  
                  18
                      Remote Site Survivability
               
                  
               
               
               
- 
                     
                     Remote Site Survivability
                        
                     
                     
                     
- How it Works
 - Normal Behavior Call Process
 - Remote Survivable Call Process Behavior
 - Entering Survivable Mode
 - Exiting Survivable Mode
 - Remote Site Survivability with a BroadSoft Server
 - Remote Site Survivability Configuration
 - Group survivability-sip-status
 - Group Statistics
 - Group survivability-sip-invites
 - Group Statistics
 - Group survivability-sip-register
 - Group Statistics
 - Group survivability-sip-errors
 - 
                           
                           Group Statistics
                              
                           
                           
                           
- Application Errors
 - CAC BW Drop
 - CAC Session Drop
 - Drop Media Errors
 - Early Media Exps
 - Expired Sessions
 - Exp Media Drops
 - Invalid Messages
 - Invalid Requests
 - Invalid Responses
 - Media Exp Events
 - Media Failure Drops
 - Multiple OK Drops
 - Multiple OK Terms
 - Non-ACK 2xx Drops
 - SDP Answer Errors
 - SDP Offer Errors
 - SNMP Trap for Survivability
 - Survivability Alarms and Logging
 - Transaction Errors
 
 
 
 - 
                     
                     Remote Site Survivability
                        
                     
                     
                     
 - 19 Web Server TLS Configuration
 - 
               
               
                  
                  20
                      Session Plug-In Language
               
                  
               
               
               
- Oracle SPL Plug-ins
 - SNMPv1v2 Community Configuration
 - Supported SPL Engines
 - Load and Enable an SPL Plug-in
 - Import and Export the Configuration
 - SBC Deployment Behind a NAT Device
 - Lync Emergency Call SPL Plug-in
 - Inserting SIP Headers into SIPREC Metadata
 - Universal Call Identifier SPL
 - SIP Trunking SPLs for Specific Service Providers
 - Comfort Noise Generation SPL
 - Maintenance and Troubleshooting Commands for SPLs
 - Emergency Location Identification Number (ELIN) Gateway Support
 - Avaya Session Manager (SM) Redundancy
 
 - 21 Local Media Playback
 - 22 Advanced Media Termination Support
 - 
               
               
                  
                  23
                      RCS Services
               
                  
               
               
               
- Message Session Relay Protocol
 - MSRP B2BUA Support for NG911
 - MSRP and High Availability
 - MSRP Configuration
 - MSRP Management Monitoring
 - MSRP Statistics
 - RCSe TLS/TCP Re-Use Connections
 
 - 
               
               
                  
                  24
                      How to use
                  	 the ACLI
               
                  
               
               
               
- The ACLI
 - Using the ACLI
 - Command Abbreviation and Completion
 - Context-Sensitive Help
 - Configuring Using the ACLI
 - Working with Configuration Elements
 - ACLI Configuration Summaries
 - 
                     
                     Data Entry
                        
                     
                     
                     
- ACLI Field Formats
 - Boolean Format
 - Carrier Format
 - Date Format
 - Date and Time Format
 - Day of Week Format
 - Enumerated Format
 - Hostname (or FQDN) Format
 - IP Address Format
 - Name Format
 - Number Format
 - Text Format
 - Time of Day Format
 - Preset Values
 - Default Values
 - Error Messages
 - Special Entry Types Quotation Marks and Parentheses
 - Multiple Values for the Same Field
 - Multi-Word Text Values
 - An Additional Note on Using Parentheses
 - Option Configuration
 
 
 - 25 Appendix RTC Support
 - 
               
               
                  
                  26
                      Maintenance and Troubleshooting
               
                  
               
               
               
- Software Watchdog and Monitoring Timer
 - Software Watchdog Timing
 - Software Watchdog Response Actions
 - Show the Thread Health Status
 - Configure the Software Watchdog
 - Advanced Logging
 - TCP Connection Tools
 - Show Commands Related to VNF Deployments
 - SNMP MIBs and Traps Related to VNF Deployments
 - Log Files for the VNF
 
 - A SIP Compatibility Options