AudioCodes Mediant 800C SBC User Manual

7. Configuring AudioCodes Mediant 800C SBC
Mediant 800C with ZPLS
- 25 -
7.4.2 Creating a TLS Context for a Zoom Phone System
The section below describes how to request a certificate for the SBC WAN interface and configure it.
The certificate is used by the SBC to authenticate the connection with the Zoom Phone System.
To create a TLS Context for Zoom Phone System:
1. Open the TLS Contexts page (Setup menu > IP Network tab > Security folder > TLS Contexts).
2. Create a new TLS Context by clicking +New, and configure the parameters using the table
below as reference.
Table 3: New TLS Context
Index
Name
TLS Version
1
Zoom (arbitrary descriptive name)
TLSv1.2 and TLSv1.3
All other parameters can be left unchanged with their default values.
3. Click Apply; you should see the new TLS Context and option to manage the certificates at the
bottom of 'TLS Context' table.
7.4.3 Generating a CSR and Obtaining the Certificate from a Supported CA
This section shows how to generate a Certificate Signing Request (CSR) and obtain the certificate
from a supported Certification Authority.
To generate a Certificate Signing Request (CSR) and obtain the certificate from a supported
Certification Authority:
1. Open the TLS Contexts page (Setup menu > IP Network tab > Security folder > TLS Contexts).
2. In the TLS Contexts page, select the Zoom TLS Context index row, and click the Change
Certificate link located below the table; the Context Certificates page appears.
3. Under the Certificate Signing Request group, do the following:
a. In the 'Common Name [CN]' field, enter the SBC FQDN name
(for example, zpls-sbc.audiocodes.com).
b. In the '1st Subject Alternative Name [SAN]' field, change the type to ‘DNS’ and enter the
SBC FQDN name (based on example above, zpls-sbc.audiocodes.com).
c. Change the 'Private Key Size' based on the requirements of your Certification Authority.
Many CAs do not support private keys of size 1024.
d. To change the key size on TLS Context, go to: Generate New Private Key and Self-Signed
Certificate, change the 'Private Key Size' and click Generate Private-Key. To use 2048 as
a Private Key Size value, you can click Generate Private-Key without changing the
default key size value.
e. Fill in the rest of the request fields according to your security provider's instructions.
f. Click the Create CSR button; a textual certificate signing request is displayed in the area
below the button.
4. Copy the CSR from the line "----BEGIN CERTIFICATE REQUEST" to "END CERTIFICATE REQUEST-
---" to a text file (such as Notepad), and save it to a folder on your computer with the file
name, for example certreq.txt.
5. Send certreq.txt file to the Certified Authority Administrator for signing.

AudioCodes Mediant 800C SBC Specifications

General

Protocols	SIP, H.323, MGCP
Category	Session Border Controller (SBC)
Form Factor	Rack-mountable
Ethernet Ports	4 x 10/100/1000Base-T
FXO/FXS Ports	Up to 8 FXS ports
T1/E1 Ports	Up to 4 T1/E1 ports
Voice Codec Support	G.711, G.729, G.726, G.722
Management Interfaces	Web GUI, CLI, SNMP, Syslog
Power Supply	AC 100-240V
Security Features	TLS, SRTP
Operating Temperature	0°C
Voice Channels	Up to 120 voice channels

Summary

Introduction

About the Zoom Phone Local Survivability

Explains Zoom Phone's cloud-based nature and its survivability feature for business continuity.

About AudioCodes SBC Product Series

Details AudioCodes SBC devices, their role in VoIP security, mediation, and service assurance.

Environment Information

Deployment Topology

Illustrates the typical deployment environment for AudioCodes SBC and Zoom Phone Local Survivability.

Safety Precautions

Mounting the Device

Connecting Device to Power

Configuring Zoom Phone Local Survivability Module

Zoom Node Configuration

Details the configuration and registration of the Zoom Node, pre-installed on the Mediant 800C's OSN module.

Configuring Zoom Node Virtual Machine

Describes the initial configuration steps for the Zoom Node Virtual Machine.

Test Zoom Node Network Connectivity

Steps to test network connectivity for the Zoom Node Server before registration.

Zoom Node Registration

Procedure to register the Zoom Node within the Zoom web portal by generating a registration code.

Zoom Phone Local Survivability Module Setup

Adding Local Survivability Service

Steps to deploy the Local Survivability Module on the Zoom Node server.

Assigning a Local Survivability Server to a site

Details on assigning the configured Zoom Phone Local Survivability Module to a specific site.

Integrating SBC with ZPLS Module

Assigning an SBC to a route group

Steps to create and assign Route Groups for PSTN connectivity with the ZPLS module.

Testing the ZPLS Service Module

Simulating a failover

How to simulate an internet outage to test the Local Survivability service.

Testing Mode

Enabling Testing Mode to bypass firewall rules for simulating failover.

Configuring AudioCodes Mediant 800C SBC

Validating AudioCodes SBC License and Version

Ensures the AudioCodes SBC has the correct license and firmware version for Zoom Phone integration.

Prerequisites

Lists the necessary items required before configuring the SBC for Zoom Phone.

Configuring IP Network Interfaces

Guides on configuring the SBC's IP network interfaces for LAN and WAN connectivity.

Configuring TLS Context for Zoom

Steps to configure TLS context for a secure SIP TLS connection with the Zoom Phone Cloud.

Configuring Media Realms

Details on configuring Media Realms for dividing UDP port ranges for different interfaces.

Configuring SIP Signaling Interfaces

Steps to configure SIP Interfaces, defining listening ports and types for signaling traffic.

Configuring Proxy Sets and Proxy Address

Guides on configuring Proxy Sets, defining destination addresses for IP entities.

Configuring Coders

Instructions for configuring coders (Coder Groups) for Zoom Phone systems and SIP Trunk.

Configuring IP Profiles

Details on configuring IP Profiles, defining call capabilities for signaling and media.

Configuring IP Groups

Steps to configure IP Groups, representing IP entities for defining call routing.

Configuring IP-to-IP Call Routing Rules

Defines rules for forwarding SIP messages between IP entities.

Configuring PSTN Breakout (Optional)

Guides on configuring the SBC for connecting to the PSTN network for breakout.

Configuring Mutual TLS Authentication for SIP

Configuration for SBC to work in mutual (two-way) TLS authentication mode with Zoom.

Zoom Data Centers

Zoom Public Trusted Certificate List

Recovering ZPLS from Disaster

Enabling OSN's Internal vNIC