Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
You may experience some slow load times, errors, and slight inconsistencies. We ask for your patience as we finalize the launch. Thank you.

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

trunk from CUBE or CUCM?

Where is the best place to terminate a SIP trunk to a telecoms provider? CUBE or on CUCM itself

Something is telling me CUBE but I'm not sure why

Sent from Cisco Technical Support iPhone App

  • IP Telephony
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

trunk from CUBE or CUCM?

Some time ago this was discussed, I kept this in a notepad:

A direct SIP trunk is certainly technically feasible, but it is an inflexible and insecure solution and therefore strongly NOT recommended.

Reasons to terminate a SIP trunk on an enterprise demarc such as CUBE include but are not limited to:

- Lack of call admission control (SLA enforcement and DOS attack mitigation) on the SIP trunk

- Visibility of the CUCM and endpoint IP addresses to the SP network (and therefore to potential hackers)

- Very limited SIP trunk load balancing and redundancy capabilities

- No SIP trunk sharing between multiple CUCM clusters or other IP-PBX/proxy call agents in the enterprise

- No SIP malformed packet or other protocol level attack mitigation for your CUCM

- No way to troubleshoot voice quality problems to determine if it's your network or the SPs network at fault

- Much more limited toll fraud prevention techniques on the SIP trunk

- No way to control IP QoS settings on the incoming packets from the SP, and no way to customize them on the outgoing packets

- No way to manipulate SIP msging from the SP before it hits your CUCM to customize it to what CUCM/IP-PBX prefers to see

- Limited means of complying to the SP UNI (SIP msg manipulation on outbound msgs to the SP, and capabilities such as early-offer)

- Having to implement the SP UNI on CUCM instead of your enterprise preferred policies (and having to replicate this on every CUCM and IP-PBX routing calls to the SIP trunk)

- Having no way of doing a SIP registration to the SP when this is required on the SIP trunk

HTH

java

if this helps, please rate

www.cisco.com/go/pdihelpdesk

HTH

java

if this helps, please rate

www.cisco.com/go/pdi
4 REPLIES
Cisco Employee

trunk from CUBE or CUCM?

Some time ago this was discussed, I kept this in a notepad:

A direct SIP trunk is certainly technically feasible, but it is an inflexible and insecure solution and therefore strongly NOT recommended.

Reasons to terminate a SIP trunk on an enterprise demarc such as CUBE include but are not limited to:

- Lack of call admission control (SLA enforcement and DOS attack mitigation) on the SIP trunk

- Visibility of the CUCM and endpoint IP addresses to the SP network (and therefore to potential hackers)

- Very limited SIP trunk load balancing and redundancy capabilities

- No SIP trunk sharing between multiple CUCM clusters or other IP-PBX/proxy call agents in the enterprise

- No SIP malformed packet or other protocol level attack mitigation for your CUCM

- No way to troubleshoot voice quality problems to determine if it's your network or the SPs network at fault

- Much more limited toll fraud prevention techniques on the SIP trunk

- No way to control IP QoS settings on the incoming packets from the SP, and no way to customize them on the outgoing packets

- No way to manipulate SIP msging from the SP before it hits your CUCM to customize it to what CUCM/IP-PBX prefers to see

- Limited means of complying to the SP UNI (SIP msg manipulation on outbound msgs to the SP, and capabilities such as early-offer)

- Having to implement the SP UNI on CUCM instead of your enterprise preferred policies (and having to replicate this on every CUCM and IP-PBX routing calls to the SIP trunk)

- Having no way of doing a SIP registration to the SP when this is required on the SIP trunk

HTH

java

if this helps, please rate

www.cisco.com/go/pdihelpdesk

HTH

java

if this helps, please rate

www.cisco.com/go/pdi
New Member

Re: trunk from CUBE or CUCM?

Fantastic, and into evernote it goes

Sent from Cisco Technical Support iPhone App

VIP Super Bronze

trunk from CUBE or CUCM?

Steven,

In your excitement..you forgot to rate this fantastic post from Jamie.

Please rate all useful posts

"opportunity is a haughty goddess who waste no time with those who are unprepared"

Please rate all useful posts "The essence of christianity is not the enthronement but the obliteration of self --William Barclay"
New Member

trunk from CUBE or CUCM?

noted and rated

169
Views
10
Helpful
4
Replies