MiVoice Border Gateway Engineering Guidelines January, 2017 Release 9.4 1 NOTICE The information contained in this document is believed to be accurate in all respects but is not warranted by Mitel Networks™ Corporation (MITEL®). The information is subject to change without notice and should not be construed in any way as a commitment by Mitel or any of its affiliates or subsidiaries. Mitel and its affiliates and subsidiaries assume no responsibility for any errors or omissions in this document. Revisions of this document or new editions of it may be issued to incorporate such changes. No part of this document can be reproduced or transmitted in any form or by any means - electronic or mechanical - for any purpose without written permission from Mitel Networks Corporation. Trademarks The trademarks, service marks, logos and graphics (collectively "Trademarks") appearing on Mitel's Internet sites or in its publications are registered and unregistered trademarks of Mitel Networks Corporation (MNC) or its subsidiaries (collectively "Mitel") or others. Use of the Trademarks is prohibited without the express consent from Mitel. Please contact our legal department at [email protected] for additional information. For a list of the worldwide Mitel Networks Corporation registered trademarks, please refer to the website: http://www.mitel.com/trademarks. Product names mentioned in this document may be trademarks of their respective companies and are hereby acknowledged. MBG - Engineering Guidelines Release 9.4 January, 2017 ®,™ Trademark of Mitel Networks Corporation © Copyright 2017, Mitel Networks Corporation All rights reserved 1 1 About this Document ........................................................................................................................ 5 1.1 Overview .................................................................................................................................... 5 1.2 Prerequisites ............................................................................................................................... 5 1.3 About the MBG Documentation Set .......................................................................................... 5 2 Supported Configurations ................................................................................................................. 5 2.1 Services ...................................................................................................................................... 5 2.2 Teleworkers and Remote Offices ............................................................................................... 6 2.3 NAT Traversal for Multi-instance MiVoice Business ................................................................ 9 2.4 Secure Gateway for Broadview Networks Silhouette HKS ..................................................... 10 2.5 Secure Recording Environment................................................................................................. 11 2.6 SIP Trunking ............................................................................................................................. 13 2.7 Daisy Chain Deployments ........................................................................................................ 14 2.8 MBG in MiCollab .................................................................................................................... 17 2.9 MBG in MiVoice Business Express ......................................................................................... 17 2.10 Partial Service Configurations .............................................................................................. 18 3 Common Requirements................................................................................................................... 18 3.1 Administrative Access .............................................................................................................. 18 3.2 Firewalls (DMZ deployment) ................................................................................................... 19 4 Remote Phone Access ..................................................................................................................... 20 4.1 Remote Site Requirements ....................................................................................................... 21 4.2 Behavior ................................................................................................................................... 24 4.3 Firewall Configuration for Remote MiNet Devices ................................................................. 25 4.4 Configuring MBG for Remote SIP Devices ............................................................................. 25 4.5 Firewall Configuration for Remote SIP Devices ...................................................................... 26 5 SIP Trunking ................................................................................................................................... 26 5.1 Overview .................................................................................................................................. 26 5.2 Send Options Keepalives.......................................................................................................... 27 5.3 Bandwidth Requirements ......................................................................................................... 27 5.4 Resilient Trunk Configuration .................................................................................................. 27 5.5 DNS Support ............................................................................................................................ 29 5.6 Firewall Configuration for SIP Trunking ................................................................................. 29 6 Call Recording ................................................................................................................................ 29 6.1 Call recording vs. Local Streaming .......................................................................................... 29 2 6.2 Indirect Call Recording ............................................................................................................ 30 7 Web Real-Time Communication (WebRTC) .................................................................................. 30 7.1 WebRTC Gateway Supported Configurations .......................................................................... 30 7.2 WebRTC Architecture and Topology ....................................................................................... 31 7.3 Firewall Configuration for WebRTC Gateway ......................................................................... 33 8 Additional Application Requirements ............................................................................................. 33 8.1 MiCollab Client v6.0+ .............................................................................................................. 33 8.2 MiContact Center ..................................................................................................................... 34 8.3 Web Proxy ................................................................................................................................ 34 8.4 Remote Management Service ................................................................................................... 34 9 Additional Security Considerations ................................................................................................ 35 9.1 SIP Security .............................................................................................................................. 35 10 Traffic Shaping ................................................................................................................................ 35 10.1 Overview ............................................................................................................................... 35 10.2 Technical Details .................................................................................................................. 35 11 Clustering ........................................................................................................................................ 36 11.1 Overview .................................................................................................................................. 36 11.2 Cluster Zones ............................................................................................................................ 37 11.3 Node Weighting ........................................................................................................................ 37 11.4 Additional Considerations ........................................................................................................ 38 11.5 Firewall Configuration for Clustering ...................................................................................... 38 12 Advanced Options ........................................................................................................................... 39 12.1 Resiliency ............................................................................................................................. 39 12.2 IP Translations ...................................................................................................................... 40 12.3 Streaming Addresses ............................................................................................................