• No results found

AP1950S Secure VoIP Gateway High Performance Secure VoIP Gateway Solution

N/A
N/A
Protected

Academic year: 2021

Share "AP1950S Secure VoIP Gateway High Performance Secure VoIP Gateway Solution"

Copied!
25
0
0

Loading.... (view fulltext now)

Full text

(1)

AddPac Technology

Sales and Marketing

AP1950S

Secure VoIP Gateway

High Performance Secure VoIP Gateway Solution

Product Overview

(2)

Contents

• Product Overview

• Hardware Specification

• APOS Technology

• VoIP (Voice over IP) service

• TLS/SRTP Secure VoIP Service

• Advanced QoS Features

• Network Protocols

• Network Management

• Security Management

• Application Service

• Ordering Information

(3)

Product Overview

• H.323/SIP/MGCP Triple Concurrent Stack Embedded

• High Performance RISC & Programmable DSP Architecture

• Secure VoIP Service (SRTP, TLS, etc)

• Up to 2E1/T1 Secure VoIP Performance

• Two(2) 10/100Mbps Fast Ethernet (IP Share ,etc)

• High Performance LAN-to-LAN Routing Capability

• G.711/G.726/G.723/G.729, T.38 Fax , VAD, etc

• Powerful Network Protocols (PPPoE, DHCP, Static Routing, etc)

• Firmware Upgradeable Architecture

• VPMS (VoIP Plug&Play Management System) for Large Scale

Deployment

• Advanced Voice QoS Mechanism

• Light and Compact Design with Internal Power Supply

• Two(2) VoIP Module Slot

AP1950S Secure VoIP Gateway

(4)

Product Highlights

State-of-art Signaling

H.323, SIP, MGCP

Concurrent Triple Stack

Broadband IP Networking

With dual 10/100Mbps

Fast Ethernet

Powerful Network Protocol

Support

VPMS Large Scale VoIP

Gateway Management Support

High Performance RISC CPU

+ Programmable DSP

Excellent Voice Quality

G.729/G.723/G726/G711

APOSTechnology

Firmware Upgradeable Architecture

TLS/SRTP Secure VoIP Service

Module Type

8-Port VoIP Cards,

Hot-Swap, Internal Power

Supply

High Performance

LAN-to-LAN Packet Routing

Processing

Powerful Trouble Shooting &

AP1950S Secure VoIP Gateway

(5)

EMS

APOS Technology

AddPac VoIP Gateway Hardware Platform

Multimedia Conferencing, and more… Our Customer Application

OSD

Broadband IP Networking

Video Audio Voice Data

APOS Internetworking Technology

• APOS : AddPac Internetworking Operating System

• OSD : On- Screen Display

• EMS : Element Management System

AP1950S Secure VoIP Gateway

(6)

Hardware Specification CPU RISC

High-end

DSP

• RISC Microprocessor Computing Power

• Up to 16 Port Analog VoIP Gateway

• Two(2) VoIP Module Slots (Hot-Swap)

- 8-Port FXS Card, 8-Port FXO Card, 4-Port FXS 4-Port

FXO Card, 1-Port Digital E1/T1 Card, 2-Port Digital

E1/T1 Card

• Network Interface

-Two(2) 10/100Mbps Fast Ethernet (RJ45)

• RS232C Console Interface

• Run LED, LAN LED, Port LEDs

• Internal Power Supply

AP1950S Secure VoIP Gateway

(7)

LAN1 10/100Mbps Ethernet LAN0 10/100Mbps Ethernet

Power Input

Network interface Configurations

AP1950S VoIP Series Basic Specifications Voice Interface Two(2) VoIP Module Slots

AP-N1-FXS8, AP-N1-FXO8, AP-N1-FXS4O4, AP-N1-E1, AP-N1-2E1

Ethernet Interface 2-Ports 10/100Mbps Ethernet Interface(RJ- 45)

Flash Memory 128 Mbyte High-speed Flash Memory Base Memory 128 Mbyte High-speed DDR Memory Power Requirement Power Supply Adaptor / VAC 110~220V,

50/60Hz, 40Watt

Operating Temperature 0ºC ~ 45ºC (32 ºF ~ 122ºF) Storage Temperature -40ºC ~ 85ºC (-40ºC ~ 185ºF) Relative Humidity 5% ~ 95% (Non-condensing)

Hardware Specifications

Power Switch

Analog

Phone FAX

Hardware Specification

VoIP Module

AP1950S Secure VoIP Gateway

Hot-Swap Switch

Console Interface

Port LEDs

(8)

Hardware Specification

• VoIP Interface Module

AP1950S Secure VoIP Gateway

AP-N1-FXS8 8-Port FXS Module

AP-N1-FXO8 8-Port FXO Module

AP-N1-FXS4O4 4-Port FXS&4-Port FXO

Module

AP-N1-E1 1-Port Digital E1/T1 Module

AP-N1-2E1 2-Port Digital E1/T1 Module

(9)

• H.323, SIP, and MGCP Triple Stack

• H.323

– ITU-T Standard H.323 v3 Support

– Support H.245 Tunneling

– Including H.235 Security Features

• SIP

– IETF RFC3261 or RFC2543 SIP Standard

• MGCP

– IETF RFC2705bis-02 Standard MGCP 1.0

VoIP (Voice over IP) Service

SIP

H.323

MGCP

IP Network

(WAN)

Concurrent Triple VoIP Stack

Voice

AP1950S Secure VoIP Gateway

(10)

• H.323

– Fast connect, normal connect support – H.245 tunneling support

– Q.931 response message setting for inbound VoIP calls – H.245 logical channel open timing selection function – Start H.245 procedure support

– DTMF / Hook flash relay with H.245 alphanumeric / signal – Secondary gatekeeper support

– Gatekeeper assignment according to the domain name – Gatekeeper discovery with multicast

– Lightweight RRQ support – Signaling TCP port assignment – Resource threshold setting with RAI – H.235 clear-token, crypto-token support – canMapAlias support

– Technical prefix (supported prefix) support – Public IP assignment in NAT environment

• SIP

– Gateway-based / Endpoint-based registration support – Secondary proxy-server assignment function

– SIP signaling port change function

– SIP proxy server assignment according to the domain name

– T.38 real-time fax relay support

– DTMF relay support with RFC2833 / OPTION message – Re-INVITE support

• MGCP

– Secondary call agent assignment function – Default package assignment

– Announcement Server Package, Generic Media Package, Handset Package, Line Package, Trunk Package support

– MGCP call agent assignment according to the domain name

– T.38 real-time fax relay support

– DTMF relay support based on RFC2833

VoIP (Voice over IP) Service

AP1950S Secure VoIP Gateway

(11)

VoIP (Voice over IP) Service

• FAX

– Fax relay mode supporting T.38, inband-T.38, bypass mode

– Lost packet compensation with redundant setting in case of T.38 fax relay

– Fax relay mode, rate setting for remote end

• Voice Codec

– G.711 A-Law, G.711 U-Law – G.726 r16, G.726 r32 – G.729A

– G.723.1 r63, G.723.1 r53

– VAD (Voice Activity Detection) function support

– DTMF relay support (H.323, SIP, MGCP common) based on RFC2833

• RTP

– Redundant RTP packet transmission in case of severe packet loss

– Dynamic jitter buffer management and RPT packet jitter and loss compensation with heuristic & DSP error concealment

– Static jitter buffer setting support

– Voice frame per RTP packet number control for each codec

– In-band ring-back tone support – Virtual ring-back tone support – Tone parameter change support

VoIP

AP1950S Secure VoIP Gateway

(12)

• VoIP Call Controls

– Hot line connection function with PLAR (Private Line Auto Ring Down)

– Leased line emulation function – Connection monitoring function

– Fault tolerant with Redundancy and Call Distribution among Gateways for load balancing

– Call attempt with IP address

– H.323, SIP, MGCP inbound call connection for each voice port

– Multiple E.164 setting for one voice port

– One E.164 or digit pattern can be assigned to more than one voice port

– Hunting with Longest match/ priority/ sequence/

random

– One stage call setup by Digit forwarding – Call barring with specific digit patterns

– Calling and called number conversion for PSTN outbound calls

– PSTN rerouting in case of VoIP call attempt failure

• VoIP Call Controls (cont.)

– Call transfer for internal calls – Call pickup for internal calls

– Calling and called number conversion for VoIP outbound calls

– Calling and called number conversion for VoIP inbound calls

– Fax broadcasting call control

VoIP (Voice over IP) Service

AP1950S Secure VoIP Gateway

(13)

TLS Features for Secure VoIP Service

AP1950S Secure VoIP Gateway

• Support for TLS 1.1, TLS 1.0 and SSL 3.0 protocols

• Since SSL 2.0 is insecure it is not supported.

• TLS 1.2 is supported but disabled by default.

• Support for TLS extensions: server name indication, max record size,

opaque PRF input, etc.

• Support for authentication using the SRP protocol.

Support for authentication using both X.509 certificates and OpenPGP

keys.

• Support for TLS Pre-Shared-Keys (PSK) extension.

• Support for Inner Application (TLS/IA) extension.

• Support for X.509 and OpenPGP certificate handling.

• Support for X.509 Proxy Certificates (RFC 3820).

• Supports all the strong encryption algorithms (including SHA-256/384/512),

including Camellia (RFC 4132).

• Supports compression (optional).

• CRLs

– CRL (Certificate Revocation List)

– OCSP (Online Certificate Status Protocol, RFC2560) (via HTTP)

• Hash Algorithm : SHA-1, MD5

(14)

SSL/TLS Protocol Layers

Application

Application

TCP TCP

IP IP TCP TCP

IP IP

Application

Application

SSL/TLS

SSL/TLS

Compression

Compression

Authentication

Authentication

Application

Application

Fragmentation

Fragmentation

Encryption

Encryption

TCP TCP

IP IP

Sockets

AP1950S Secure VoIP Gateway

(15)

SSL/TLS Handshake

Client Hello

Client Hello

Certificate *

Certificate *

Server Hello

Server Hello

Client Server

ServerKeyExchange *

ServerKeyExchange *

CertificateRequest *

CertificateRequest *

Server HelloDone

Server HelloDone

Certificate *

Certificate *

ServerKeyExchange *

ServerKeyExchange *

CertificateRequest *

CertificateRequest *

ChangeCipherSpec

ChangeCipherSpec

Finished

o

Finished

o

ChangeCipherSpec ChangeCipherSpec

Finished

o

Finished

o

Application Data

o

Application Data

o

* optional

* optional

o

encrypted

Application Data

o

Application Data

o

AP1950S Secure VoIP Gateway

(16)

TLS Comparison with OpenSSL

SSLv2.0 SSLv3.0 TLSv1.0 TLSv1.1 TLSv1.2

AddPac No Yes Yes Yes Yes

OpenSSL Yes Yes Yes No No

• Protocol Support

Anon-

RSA

RSA RSA

Export

DHE-

RSA

DHE-

DSS

SRP-

DSS

SRP-

RSA

SRP PSK ECC

AddPac Yes Yes Yes Yes Yes Yes Yes Yes Yes No

OpenSSL Yes Yes Yes Yes Yes No No No No Yes

• Key Exchange Algorithms

AES-

256-

CBC

AES-

128-

CBC

3DES

CBC

DES

CBC

RC4-

128-

CBC

RC4-

40(*

1

)

RC2-

40(*

1

)

Camellia SEED ARIA

AddPac Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes

• Encryption Algorithms

(*1) 40-bit encryption is insecure

AP1950S Secure VoIP Gateway

(17)

SRTP ( Secure Real-time Transport Protocol ) Features

• RFC4568, Standards Track, Session Description

Protocol (SDP) Security Descriptions for Media Streams

• RFC 3711, Proposed Standard, The Secure Real-time

Transport Protocol (SRTP)

• RFC 3551, Standard 65, RTP Profile for Audio and

Video Conferences with Minimal Control

• RFC 3550, Standard 64, RTP: A Transport Protocol for

Real-Time Applications

• RFC 2104, Informational, HMAC: Keyed-Hashing for

Message Authentication

• Cipher Algorithm : ARIA, SEED, AES, DES(*), 3DES(*)

* Support at AddPac Specific SRTP

AP1950S Secure VoIP Gateway

(18)

Branch Office

Internet

(a) Internal - Internal Call (no Security) (b) Internal - External Call (TLS/SRTP) (c) External - External Call (TLS/SRTP) Headquarters

AP1950S (a)

(b)

(c) Telecommuter

Between External Users :

Security Enable : Signaling (TLS/SIP), SRTP

Between Internal Users :

Security Disable : Signaling (UDP/SIP), SRTP

Between Internal and External User :

Security Enable : Signaling (TLS/SIP), SRTP

Signaling RTP/SRTP CA (Certificate Authority)

CRLs/OCSP

SRTP/TLS Network Diagram

PBX

PBX

AP1950S

AP1950S Secure VoIP Gateway

Analog or Digital Phone

(19)

• Enhances Transmit Voice QoS Features

– Voice Traffic Priority Queuing – QoS Service Profiling

– Providing Virtual Network Transmit Algorithm – Real-time Voice Traffic QoS Support

– RTP Packet Transmit Interval Control

– Supporting RTP Packet Redundancy Scheme – IP Header Control such as ToS, Diffserv

IP Network

(WAN)

Voice QoS Features Voice QoS Features

Best and Optimal Voice Quality

Voice Voice

• Enhances Receive Voice QoS Features

– Dynamic Jitter Buffer Management – Error Concealment

– Support T.38 FAX Data Error Recovery Scheme

Advanced QoS Features

AP1950S Secure VoIP Gateway

(20)

IP Network

(WAN)

LAN

Internet

WWW

IP

IP IP

Basic Network Protocols

-ARP, IPv4, TCP, UDP, ICMP, SCTP, IGMP, MLD

Routing Protocol

- IPv4 : Static

Service Protocol

-FTP, Telnet, TFTP, DHCP Server/Relay, SNMP Server - CDP (Cisco Discovery Protocol)

- DNS Resolver , DDNS(nsupdate) - Bridge

- Syslog

IPv4 Address Configuration

- Fixed (Static) - DHCP - PPPoE

Miscellaneous

-Cisco Style CLI

- Standard & Extended IPv4 Access List - Multi-level User Account Management - IP accounting

- STUN Client

Network Protocols

AP1950S Secure VoIP Gateway

(21)

• SNMP

– Standard Simple Network Management Protocol( SNMP) Agent support

– MIB v1 and v2 Support

• Web-based Management

– Smart Easy Setup – Standard Voice Interface

– Standard PSTN Back-up Interface

• Watch-dog Function

– Hardware, Software watch-dog services

• Remote Management

– Telnet – Rlogin

• Auto Upgrade Service

– HTTP server based APOS image and configuration file auto-upgrade support

• Batch Job Function

– Text based script downloading

• Interoperable with AP-VPMS Service

– AddPac VoIP Plug & Play Management System (AP-VPMS)

IP Network

(WAN)

Network Management

AP1950S Secure VoIP Gateway

(22)

• IP packet filtering

• IP access list

• User authentication function

– Password Authentication Protocol (PAP)

– Challenge Handshake Authentication Protocol (CHAP)

• Enable/Disable specific protocols

• Auto-square connect of Telnet session

• Account Management function for multi-level user

• SNMP/TELNET/FTP/HTTP/TFTP port assignment

function

• SNMP/TELNET/FTP access list management

• Boot mode security checking function

IP Network

(WAN)

Security Management

AP1950S Secure VoIP Gateway

(23)

Standard Application

AP1950S Secure VoIP Gateway

IP Network

(WAN)

EMS

Elementary Management System

WAN Router

LAN

AP1950S Secure VoIP Gateway SRTP (PTP : Point-to-Point)

PBX

Digital 2E1

LAN 10/100M LAN

10/100M

AP-IP300 IP Phone

LAN

AP1900S Secure VoIP Gateway

PBX FXS

LAN 10/100M

HQ Branch

(24)

Ordering Information

• AP1950S Secure VoIP Gateway Hardware

– AP1900S Secure VoIP Gateway Main Body

– RISC Microprocessor with High-end Programmable DSP Architecture

– 2-ports 10/100Mbps Fast Ethernet(RJ45)

– Option Module: AP-N1-FXS8, AP-N1-FXO8, AP-N1-FXS4O4, AP-N1-

E1, AP-N1-2E1etc

– Including Network Cable & Internal Power Supply, etc.

• Built-in APOS Internetworking Software for AP1950S

• Including 1 Year Hardware Warranty

• Product Documents

– Install and Operation Guide (PDF)

• Pricing

– AddPac Technology Regional Sales Manager

– Authorized Sales and Marketing Representatives

– Please Contact www.addpac.com

(25)

Thank you!

AddPac Technology Co., Ltd.

Sales and Marketing

Phone +82.2.568.3848 (KOREA)

FAX +82.2.568.3847 (KOREA)

E-mail sales@addpac.com

Secure VoIP Gateway Series

References

Related documents

For phone calls from VoIP to the telephone network, a gateway has to be connected to the IP network and the telephone network (gateway/VoIP provider). It forwards calls from VoIP

On the other hand, if the IP telephony protocol uses UDP for its call signaling protocol, the same problems as the ones that af- fect the voice media protocol will occur (Figure

(c) Topologically trivial error cycle. This does not affect the logical state of the surface code or the states of data qubits on boundaries. Four X errors occur in the center of

AG310 users will be able to leverage their broadband phone service more than ever by automatically routing local calls from mobile phones and land lines over to VoIP service

SPA3102 users will be able to leverage their broadband phone service more than ever by automatically routing local calls from mobile phones and land lines over to VoIP

For mobile VoIP service, this product uses the state-of-art technology voice compressed algorithm and unique QoS algorithm of AddPac to maintain the maximum voice quality under

teaches idolatrous doctrines next to Jesus Christ as Saviour, namely the Babylonic mysteries, among others the ”mother and child mystery”, pronounced by the Roman an orthodox

" started trading %inary options in 311 and loved this new way to trade the $nancial markets. " now dedicate my time to my we%site and help provide valua%le information