AudioCodes Connecting Zoom Phone Carrier Peering User Manual

Configuration Note

AudioCodes Mediant™ Family of Media Gateways & Session Border Controllers
Connecting Zoom Phone Carrier Peering with AudioCodes SBC
Configuration Note Contents
1 Introduction ......................................................................................................... 9
1.1 About the Zoom Phone System .............................................................................. 9
1.2 About AudioCodes SBC Product Series ................................................................. 9
2 Configuring Zoom Phone System .................................................................... 11
3 Configuring AudioCodes' SBC ........................................................................ 13
3.1 Prerequisites ........................................................................................................ 13
3.2 Validate AudioCodes SBC License ....................................................................... 14
3.3 SBC Configuration Concept .................................................................................. 14
3.4 Configure IP Network Interfaces ........................................................................... 15
3.4.1 Configure LAN and WAN VLANs ............................................................................15
3.4.2 Configure Network Interfaces ..................................................................................16
3.5 Configure TLS Context for Zoom .......................................................................... 17
3.5.1 Configure the NTP Server Address .........................................................................17
3.5.2 Create a TLS Context for Zoom Phone System ......................................................18
3.5.3 Generate a CSR and Obtain the Certificate from a Supported CA .........................20
3.5.4 Deploy the SBC and Root / Intermediate Certificates on the SBC ..........................22
3.6 Configure Media Realms ...................................................................................... 24
3.7 Configure SIP Signaling Interfaces ....................................................................... 25
3.8 Configure Proxy Sets and Proxy Address ............................................................. 26
3.8.1 Configure Proxy Sets ...............................................................................................26
3.8.2 Configure a Proxy Address ......................................................................................27
3.9 Configure the Dial Plan Table (Customer DIDs) ................................................... 29
3.10 Configure Call Setup Rules .................................................................................. 30
3.11 Configure Message Manipulation Rules ............................................................... 31
3.12 Configure a Coder Group ..................................................................................... 35
3.13 Configure an IP Profiles ........................................................................................ 37
3.14 Configure IP Groups ............................................................................................. 39
3.15 Configure SRTP ................................................................................................... 41
3.16 Configure IP-to-IP Call Routing Rules .................................................................. 42
3.17 Configure Firewall Settings (Optional) .................................................................. 43
3.18 Miscellaneous Configuration ................................................................................. 44
3.18.1 Configuring Mutual TLS Authentication for SIP .......................................................44
3.18.2 Optimizing CPU Cores Usage for a Specific Service (relevant for Mediant 9000 and
Software SBC only) ..............................................................................................................45
4 Verify the Pairing between the SBC and Zoom Phone System ..................... 47
A Zoom Data Centers ........................................................................................... 49
Zoom Phone Carrier Peering 3 AudioCodes SBCs
Zoom Phone Carrier Peering

List of Figures

Figure 3-1: Connection Topology - Network Interfaces .........................................................................13
Figure 3-2: SBC Configuration Concept .................................................................................................14
Figure 3-3: Network Interfaces in the Topology with all entities on the WAN ........................................15
Figure 3-4: Configured VLANs in the Ethernet Device Table.................................................................15
Figure 3-5: Configuration Example of the IP Interfaces Table ...............................................................16
Figure 3-6: Configuring NTP Server Address.........................................................................................17
Figure 3-7: Configuration of TLS Context for Zoom Phone System ......................................................18
Figure 3-8: TLS Context for Zoom Phone System and Interface to Manage the Certificates ................19
Figure 3-9: Example of Certificate Signing Request Page .....................................................................21
Figure 3-10: Uploading the Certificate Obtained from the Certification Authority ..................................22
Figure 3-11: Message Indicating Successful Upload of the Certificate ..................................................22
Figure 3-12: Certificate Information Example .........................................................................................23
Figure 3-13: Configured Trusted Certificates Page ................................................................................23
Figure 3-14: Configuration Example Media Realms in Media Realm Table ..........................................24
Figure 3-15: Configuration Example of SIP Signaling Interfaces ...........................................................25
Figure 3-16: Configuration Example Proxy Sets in Proxy Sets Table ....................................................26
Figure 3-17: Configuring Proxy Address for Zoom Phone System Interface .........................................27
Figure 3-18: Configuring Proxy Address for Customer 1 SIP Trunk ......................................................28
Figure 3-19: Dial Plan Rule Table - Add Dialog Box ..............................................................................29
Figure 3-20: Configuring SIP Message Manipulation Rule 0 (for Zoom IP Group) ................................31
Figure 3-21: Configuring SIP Message Manipulation Rule 1 (for Zoom IP Group) ................................32
Figure 3-22: Configuring SIP Message Manipulation Rule 2 (for Customers SIP Trunks) ....................33
Figure 3-23: Configuring SIP Message Manipulation Rule 3 (for Zoom IP Group) ................................34
Figure 3-24: Configuring Coder Group for Zoom Phone System ...........................................................35
Figure 3-25: Configuring Allowed Coders Group for Zoom Phone System ...........................................36
Figure 3-26: Configuring Allowed Coders for Zoom Phone System ......................................................36
Figure 3-27: Configuration Example IP Groups in the IP Group Table ..................................................40
Figure 3-28: Configuring Media Security Parameter ..............................................................................41
Figure 3-29: Configured IP-to-IP Routing Rules in IP-to-IP Routing Table ............................................42
Figure 4-1: Proxy Set Status ..................................................................................................................47
Configuration Note 4 Document #: LTRT-29341
Configuration Note Contents

List of Tables

Table 3-1: Configuration Example of the IP Interfaces Table ................................................................16
Table 3-2: New TLS Context ..................................................................................................................18
Table 3-3: Configuration Example Media Realms in Media Realm Table .............................................24
Table 3-4: Configuration Example of SIP Signaling Interfaces ..............................................................25
Table 3-5: Configuration Example Proxy Sets in Proxy Sets Table .......................................................26
Table 3-6: Configuration Proxy Address for Zoom Phone System ........................................................27
Table 3-7: Configuration Proxy Address for Customer 1 SIP Trunk ......................................................28
Table 3-8: Dial Plan Carrier Customers .................................................................................................29
Table 3-9: Call Setup Rules Table .........................................................................................................30
Table 3-10: Configuration Example: Zoom IP Profile .............................................................................37
Table 3-11: Configuration Example: Customer 1 SIP Trunk IP Profile ..................................................38
Table 3-12: Firewall Table Rules ............................................................................................................43
Table A-1: Regional instances resolve to the following IP addresses ...................................................49
Table A-2: Regional Media Traffic and Ports .........................................................................................49
Zoom Phone Carrier Peering 5 AudioCodes SBCs
Zoom Phone Carrier Peering
This page is left intentionally blank.
Configuration Note 6 Document #: LTRT-29341

Configuration Note Notices

Notice
Information contained in this document is believed to be accurate and reliable at the time of printing. However, due to ongoing product improvements and revisions, AudioCodes cannot guarantee accuracy of printed material after the Date Published nor can it accept responsibility for errors or omissions. Updates to this document can be downloaded from
https://www.audiocodes.com/library/technical-documents.
This document is subject to change without notice.
Date Published: March-10-2021

WEEE EU Directive

Pursuant to the WEEE EU Directive, electronic and electrical waste must not be disposed of with unsorted waste. Please contact your local recycling authority for disposal of this product.

Customer Support

Customer technical support and services are provided by AudioCodes or by an authorized AudioCodes Service Partner. For more information on how to buy technical support for AudioCodes products and for contact information, please visit our at
https://www.audiocodes.com/services-support/maintenance-and-support

Stay in the Loop with AudioCodes

Abbreviations and Terminology

Each abbreviation, unless widely used, is spelled out in full when first used.
.
Zoom Phone Carrier Peering 7 AudioCodes SBCs
Zoom Phone Carrier Peering

Related Documentation

Document Name
Mediant 500 Gateway & E-SBC User's Manual
Mediant 500L Gateway & E-SBC User's Manual
Mediant 800 Gateway & E-SBC User's Manual
Mediant 1000B Gateway & E-SBC User's Manual
Mediant 2600 E-SBC User's Manual
Mediant 4000 SBC User's Manual
Mediant 9000 SBC User's Manual
Mediant Software SBC User's Manual
Gateway and SBC CLI Reference Guide
SIP Message Manipulation Reference Guide
AudioCodes Configuration Notes

Document Revision Record

LTRT Description
29340 Initial document release.
29341 Added call setup rule for outgoing messages towards Zoom; added message manipulation
rule towards Zoom.

Documentation Feedback

AudioCodes continually strives to produce high quality documentation. If you have any comments (suggestions or errors) regarding this document, please fill out the Documentation Feedback form on our website at https://online.audiocodes.com/documentation-feedback
.
Configuration Note 8 Document #: LTRT-29341
Configuration Note 1. Introduction

1 Introduction

This document describes how to connect Zoom Phone System to multiple customers using AudioCodes' SBC in Hosting mode and refers to the AudioCodes SBC configuration only.
This document is intended for IT or telephony professionals.
Note: To zoom in on screenshots of Web interface configuration examples,
press Ctrl and +.

1.1 About the Zoom Phone System

Zoom Phone is a fully featured cloud PBX designed with security, reliability, scalability and centralized management in mind. Zoom Phone was built from the ground up to seamlessly integrate with the Zoom Collaboration platform to deliver a feature-rich UCaaS user experience. Zoom Phone offers various deployment options providing organizations with the flexibility to migrate and deploy the platform in a manner that best suits their requirements. Zoom Phone leverages global carrier relationships to deliver PSTN connectivity in many regions of the world offering phone number portability to Zoom in most regions thereby simplifying the telephony environment with one partner for your PBX and PSTN connectivity needs. While native Zoom Phone meets the requirements of most organizations, it’s understood that some organizations have environments that may need additional functionality for global support or migration strategies. For organizations with such diverse requirements of their telephony environments, Zoom’s Premise Peering solution is offered.
Zoom Phone Premise Peering provides organizations with flexibility and seamless options to migrate their voice workloads to the cloud. This is accomplished by providing two connection types; Premise Peering PSTN (formally referred to as Bring Your Own Carrier - BYOC) and/or Premise Peering PBX (formally referred to as Bring Your Own PBX - BYOP). Zoom Phone Premise Peering PSTN enables organizations to leverage their existing telephony carrier PSTN environment for Zoom Phone connectivity. Using this functionality organizations can connect Zoom Phone with virtually any telephony carrier.

1.2 About AudioCodes SBC Product Series

AudioCodes' family of SBC devices enables reliable connectivity and security between the enterprise's VoIP network and the service provider's VoIP network.
The SBC provides perimeter defense as a way of protecting enterprises from malicious VoIP attacks; mediation for allowing the connection of any PBX and/or IP-PBX to any service provider; and Service Assurance for service quality and manageability.
Designed as a cost-effective appliance, the SBC is based on field-proven VoIP and network services with a native host processor, allowing the creation of purpose-built multiservice appliances, providing smooth connectivity to cloud services, with integrated quality of service, SLA monitoring, security and manageability. The native implementation of the SBC provides a host of additional capabilities that are not possible with standalone SBC appliances such as VoIP mediation, PSTN access survivability, and third-party value-added services applications. This enables enterprises to utilize the advantages of converged networks and eliminate the need for standalone appliances.
AudioCodes' SBC is available as an integrated solution running on top of its field-proven Mediant Media Gateway and Multi-Service Business Router platforms, or as a software-only solution for deployment with third-party hardware. The SBC can be offered as a Virtualized SBC, supporting the following platforms: Hyper-V, AWS, AZURE, AWP, KVM and VMWare.
Zoom Phone Carrier Peering 9 AudioCodes SBCs
Zoom Phone Carrier Peering
This page is intentionally left blank.
Configuration Note 10 Document #: LTRT-29341
Configuration Note 2. Configuring Zoom Phone System

2 Configuring Zoom Phone System

For configuring the Zoom Phone System, refer to Zoom Help Center at
https://support.zoom.us/hc/en-us/articles/360001297663-Getting-started-with-Zoom-Phone­admin-.
Notes: Before you begin configuration:
Contact your Zoom Representative to enable SIP groups and set up SIP trunks that are directed toward your SBC for your Zoom Phone account.
Make sure you have Zoom Portal admin credentials. Be aware that each customer needs to have a Zoom Phone admin account and all Zoom Phone related configuration will be done by the customer and not by the carrier.
Zoom Phone Carrier Peering 11 AudioCodes SBCs
Zoom Phone Carrier Peering
This page is left intentionally blank.
Configuration Note 12 Document #: LTRT-29341
Configuration Note 3. Configuring AudioCodes' SBC
Internet
Cust omer 1
Manag ement
Stat ion (OAMP)
Cust omer 1 N etwo rk
LAN
Firew all
Cli ent
Cli ent
Manag ement
Stat ion (OAMP)
Cust omer 2 N etwo rk
LAN
Firew all
Cli ent
Cli ent
Cust omer 2
ITSP
PSTN
ITSP
PSTN
Session Border Controller
Cust omer 1
Cli ent
Cust omer 2
Cli ent
suite of

3 Configuring AudioCodes' SBC

This section shows how to configure AudioCodes' SBC for internetworking with Zoom Phone System. The figure below shows an example of the connection topology for the Zoom Phone System Premise Peering Mode. Multiple connection entities are shown in the figure:
Zoom Phone Systems
Service Provider Customers SIP Trunks
Figure 3-1: Connection Topology - Network Interfaces
Note: This document shows how to pair between the AudioCodes' hosting SBC and
the Zoom Phone System with a Customers SIP Trunks. For detailed configuration of other entities in the deployment such as the SIP Trunk Provider and the local IP-PBX, see AudioCodes' SIP Trunk Configuration Notes (in the Interoperability documents).

3.1 Prerequisites

Before you begin configuration, make sure you have obtained the following for each Hosting SBC you wish to pair:
Public IP address
Public certificate that is issued by one of the Zoom supported CAs
Zoom Phone Carrier Peering 13 AudioCodes SBCs
Zoom Phone Carrier Peering
Pro xy Set
(Customer1
SIP Trunk)
Pro xy Set
(Customer2
SIP Trunk)
Pro xy Set
(Customer3
SIP Trunk)
Phone System
IP Group
(Customer1
SIP Trunk)
IP Group
(Customer2
SIP Trunk)
IP Group
(Customer3
SIP Trunk)
SIP
Interface
SBC
SIP
Interface
IP Group
SI P T r unk
SI P T r unk
SI P T r unk

3.2 Validate AudioCodes SBC License

Zoom has successfully conducted validation tests with AudioCodes' Mediant SBC Ver. 7.20A.258. For implementing the configuration described in this document, the AudioCodes SBC must be installed with a License Key that includes the following features:
Number of SBC sessions (based on requirements)
Transcoding sessions (only if media transcoding is needed)
Coders (based on requirements)
For more information about the License Key, contact your AudioCodes sales representative.

3.3 SBC Configuration Concept

The figure below illustrates the underlying concept of the configuration of AudioCodes’ SBC device.
Figure 3-2: SBC Configuration Concept
The routing from the SIP Trunks to Zoom Phone System and vice versa is dependent on the Class 4 switch routing method. The routing decision can be based on:
Customer DID Range
Trunk Context (TGRP)
IP Interface
SIP Interface (UDP/TCP Port)
Host name
The configuration shown in this document is based on a Customer DID Range using a Dial Plan. For more information, see the AudioCodes' Documentation suite.
Configuration Note 14 Document #: LTRT-29341
Configuration Note 3. Configuring AudioCodes' SBC
Management
Station (OAMP )
LAN
WAN
DMZ
LAN Port
LAN Port
Vlan ID 1
Vlan ID 2
Session B order Con troller
Firew all
Phone System
ITSP1
ITSP2
ITSP3

3.4 Configure IP Network Interfaces

This section describes how to configure the SBC's IP network interfaces. There are several ways to deploy the SBC:
SBC interfaces with the following IP entities:
Zoom Phone System
Customers SIP Trunks
Physical connection: The type of physical connection depends on the method used to
connect to the Enterprise's network. In this example topology, SBC connects to the LAN and DMZ using dedicated Ethernet ports (i.e., two ports and two network cables are used).
SBC also uses two logical network interfaces:
LAN (VLAN ID 1)
DMZ (VLAN ID 2)
Figure 3-3: Network Interfaces in the Topology with all entities on the WAN

3.4.1 Configure LAN and WAN VLANs

This section describes how to define VLANs for each of the following interfaces:
LAN Interface (assigned the name "LAN_IF")
WAN Interface (assigned the name "WAN_IF")
To configure VLANs:
1. Open the Ethernet Device table (Setup menu > IP Network tab > Core Entities
folder > Ethernet Devices).
2. There will be one existing row for VLAN ID 1 and underlying interface GROUP_1.
3. Add another VLAN ID 2 for the WAN side.
Figure 3-4: Configured VLANs in the Ethernet Device Table
Zoom Phone Carrier Peering 15 AudioCodes SBCs
Loading...
+ 35 hidden pages