GigaSMART SIP/RTP Correlation

Session Initiation Protocol (SIP) is the dominant method to initiate, maintain, modify, and terminate voice calls in service provider and enterprise networks. Real-time Transport Protocol (RTP) is used to manage the real-time transmission of voice payload across the same networks. Visibility into a subscriber’s voice traffic requires the ability to understand the subscriber attributes and stateful information contained within SIP to correlate subscriber-specific RTP traffic so that monitoring tools can achieve an accurate view of the subscriber’s traffic on the network.

SIP/RTP Examples

Refer to the following examples:

■   SIP/RTP Minimum Configuration Example
■   SIP/RTP Load Balancing Example

For details on the CLI commands used in the following examples, refer to the following commands in the reference section:

■   apps sip-whitelist
■   gsgroup
■   gsop
■   gsparams
■   map
■   port-group
■   vport

SIP/RTP Minimum Configuration Example

This is a minimum configuration example of SIP/RTP.

Step

Description

Command
1.    

Configure ports as follows:

● one network type of port. This will be used as the from attribute in the first level map.
● one tool type of port for the to attribute in the second level maps.

Then administratively enable the ports.

(config) # port 1/1/g1 type network

(config) # port 1/1/g2 type tool

(config) # port 1/1/g1 params admin enable

(config) # port 1/1/g2 params admin enable
2.  

Configure a GigaSMART group and associate it with a GigaSMART engine ports.

(config) # gsgroup alias gsg1 port-list 1/1/e1
3.  

Configure GigaSMART parameters for the SIP port list and the RTP port range.

Note:  The SIP port list is 5060 by default.

The RTP port range must be specified, otherwise all RTP will be dropped.

(config) # gsparams gsgroup alias gsg1

(config gsparams gsgroup gsg1) # rtp-port range 2000..3000

(config gsparams gsgroup gsg1) # sip-portlist 5060

(config gsparams gsgroup gsg1) # sip-session timeout 30

(config gsparams gsgroup gsg1) # sip-whitelist add sipwl1

(config gsparams gsgroup gsg1) # exit

(config) #

4.  

Configure a GigaSMART operation for either SIP flow sampling or SIP flow whitelisting or both.

(config) # gsop alias gsop-SIP flow-ops sip-flowsample port-list gsg1

(config) # gsop alias gsop-sipWL flow-ops sip-whitelist port-list gsg1
5.  

Configure a virtual port and assign it to the same GigaSMART group. Then configure a failover action on the virtual port.

(config) # vport alias vport1 gsgroup gsg1

(config) # vport alias vport1 failover-action vport-bypass
6.  

Create a first level map.

(config) # map alias map-Level1

(config map alias map-Level1) # type firstLevel byRule

(config map alias map-Level1) # roles replace admin to owner_roles

(config map alias map-Level1) # rule add pass vlan 2040 bidir

(config map alias map-Level1) # rule add pass vlan 2030..2035

(config map alias map-Level1) # to vport1

(config map alias map-Level1) # from 1/1/g1

(config map alias map-Level1) # exit

(config) #
7.  

Create a second level map for SIP whitelisting. Only one SIP whitelist map can be configured.

(config) # map alias map-sipWL

(config map alias map-sipWL) # type secondLevel flowWhitelist-sip

(config map alias map-sipWL) # roles replace admin to owner_roles

(config map alias map-sipWL) # use gsop gsop-sipWL

(config map alias map-sipWL) # to 1/1/g2

(config map alias map-sipWL) # from vport1

(config map alias map-sipWL) # exit

(config) #
8.  

Create another second level map for SIP flow sampling. Up to five SIP flow sample maps can be configured.

(config) # map alias map-sipFS

(config map alias map-sipFS) # type secondLevel flowSample-sip

(config map alias map-sipFS) # roles replace admin to owner_roles

(config map alias map-sipFS) # use gsop gsop-SIP

(config map alias map-sipFS) # flowsample add sip caller-id 510* percentage 65

(config map alias map-sipFS) # flowsample add sip caller-id 408* percentage 25

(config map alias map-sipFS) # to 1/1/g2

(config map alias map-sipFS) # from vport1

(config map alias map-sipFS) # exit

(config) #

SIP/RTP Load Balancing Example

This is a load balancing configuration example of SIP/RTP. Refer to 1 SIP/RTP Load Balancing Topology for the topology.

1 SIP/RTP Load Balancing Topology

Step

Description

Command
1.    

Configure ports as follows:

● one network type of port. This will be used as the from attribute in the first level map.
● four tool type of ports for the port group port lists
● one tool type of port for the to attribute in a shared collector map

Then administratively enable the ports.

(config) # port 10/6/q1 type network

(config) # port 10/1/x17..10/1/x20 type tool

(config) # port 10/1/x26 type tool

(config) # port 10/6/q1 params admin enable

(config) # port 10/1/x17..10/1/x20 params admin enable

(config) # port 10/1/x26 params admin enable
2.  

Configure a GigaSMART group and associate it with a GigaSMART engine ports.

(config) # gsgroup alias gsg1 port-list 1/1/e1
3.  

Configure GigaSMART parameters for the SIP port list and the RTP port range.

Note:  The SIP port list is 5060 by default.

The RTP port range must be specified, otherwise all RTP will be dropped.

(config) # gsparams gsgroup alias gsg1

(config gsparams gsgroup gsg1) # rtp-port range 2000..3000

(config gsparams gsgroup gsg1) # sip-portlist 5060

(config gsparams gsgroup gsg1) # sip-session timeout 30

(config gsparams gsgroup gsg1) # sip-whitelist add sipwl1

(config gsparams gsgroup gsg1) # exit

(config) #

4.  

Configure GigaSMART operations with load balancing for SIP whitelisting and SIP flow sampling.

(config) # gsop alias sip-wl-lb flow-ops sip-whitelist lb app sip metric hashing key caller-id port-list gsg1

(config) # gsop alias sip-fs-lb flow-ops sip-flowsample lb app sip metric hashing key caller-id port-list gsg1
5.  

Configure a virtual port and assign it to the same GigaSMART group. Then configure a failover action on the virtual port.

(config) # vport alias vport1 gsgroup gsg1

(config) # vport alias vport1 failover-action vport-bypass
6.  

Configure two port groups.

(config) # port-group alias pg1

(config port-group alias pg1) # port-list 10/1/x17..x18

(config port-group alias pg1) # smart-lb enable

(config port-group alias pg1) # exit

(config) #

(config) # port-group alias pg2

(config port-group alias pg1) # port-list 10/1/x19..x20

(config port-group alias pg1) # smart-lb enable

(config port-group alias pg1) # exit

(config) #

7.  

Create a first level map.

(config) # map alias SIP-First

(config map alias SIP-First) # type firstLevel byRule

(config map alias SIP-First) # rule add pass ipsrc 192.168.20.1 255.255.255.255 bidir

(config map alias SIP-First) # rule add pass ipdst 192.168.20.1 255.255.255.255 bidir

(config map alias SIP-First) # rule add pass ipsrc 192.168.20.128 255.255.255.255 bidir

(config map alias SIP-First) # rule add pass ipdst 192.168.20.128 255.255.255.255 bidir

(config map alias SIP-First) # to vport1

(config map alias SIP-First) # from 10/3/x1,10/6/q1

(config map alias SIP-First) # exit

(config) #
8.  

Create a second level map for SIP whitelisting. Only one SIP whitelist map can be configure

(config) # map alias sip-WL

(config map alias sip-WL) # type secondLevel flowWhitelist-sip

(config map alias sip-WL) # use gsop sip-wl-lb

(config map alias sip-WL) # to pg1

(config map alias sip-WL) # from vport1

(config map alias sip-WL) # exit

(config) #
9.  

Create another second level map for SIP flow sampling. Up to five SIP flow sample maps can be configured.

(config) # map alias map-sipFS

(config map alias map-sipFS) # type secondLevel flowSample-sip

(config map alias map-sipFS) # use gsop sip-fs-lb

(config map alias map-sipFS) # flowsample add sip caller-id 408* percentage 50

(config map alias map-sipFS) # flowsample add sip caller-id abc* percentage 75

(config map alias map-sipFS) # to pg2

(config map alias map-sipFS) # from vport1

(config map alias map-sipFS) # exit

(config) #
10.  

Add a shared collector for any uncorrelated RTP traffic from the virtual port and send it to a different tool port.

(config) # map-scollector alias Collector

(config map-scollector alias Collector) # from vport1

(config map-scollector alias Collector) # collector 10/1/x26

(config map-scollector alias Collector) # exit

(config) #
11.  

Display the statistics for this example.

(config) # show port stats