Configuring the Avaya Session Border Controller media interface

Last Updated : Jun 03, 2019 |

About this task

Media data can be passed through the default UDP port range or tunneled through port 443.

Procedure

  1. Log in to the Avaya SBC web administration portal.

Perform steps 2 and 3 if you want to set up media data tunneling through port 443. Otherwise, continue from step 4.

  1. Navigate to Device Specific Settings > Advanced Options > Feature Control.
  2. Select the Media Tunneling check box and then click Save.
  3. To configure an external media interface, do the following:
    1. Navigate to Device Specific Settings > Media Interface and then click Add.
    2. In Name, provide a name for the media interface.

      For example: externalMediaInterfaceProfile.

    3. From IP Address, select the B1 IP address.
      Important:

      • Do not use this IP address for any other interface bound to port 443, such as for HTTP tunneling configuration.

      • Do not use VLAN tag for the media tunneled interface.

    4. If you are using media tunneling, from TLS Profile, select the required TLS server profile for the media interface that you have created when performing TLS server profile checklist for media tunneling interfaces.

      For example, mediaTlsProfile.

      If media tunneling is disabled, set this field to None.

    5. In Buffer Size, provide the required buffer size for media data.
  4. To configure the internal media interface, do the following:
    1. Navigate to Device Specific Settings > Media Interface and then click Add.
    2. In Name, provide a name for the media interface.

      For example: internalMediaInterfaceProfile.

    3. From IP Address, select the A1 IP address.
  5. To enable video media, do the following:
    1. Navigate to Domain Policies > Application Rules and then clone an existing media rule or create a new one.
    2. For the new application rule, select In and Out for both the Audio and Video application types.
    3. Configure Maximum Concurrent Sessions and Maximum Sessions Per Endpoint as required.
    4. Click Finish.
  6. To configure media encryption and enable Binary Floor Control Protocol (BFCP) or Far End Camera Control (FECC), do the following:
    1. Navigate to Domain Policies > Media Rules and clone an existing media rule or create a new one.
    2. For the new media rule, navigate to Encryption > Miscellaneous and select the Capacity Negotiation check box.
    3. On the Audio Encryption screen, in all Preferred Format fields, select SRTP_AES_CM_128_HMAC_SHA1_80.
    4. On the Advanced tab, select the BFCP Enabled and FECC Enabled check boxes.
  7. To configure a policy group using the newly created application and media rules, navigate to Domain policies > End Point Policy Groups , create a new group, and add the required application and media rules to that group.