2025 - Intercompany Media Engine

Cisco Intercompany
Media Engine
Cullen Jennings, Ph.D.
fluffy@cisco.com

TemporaryWorker
BranchOffice
HQ
Customer
Consultant
Vendor
Communities, Not Just Companies:Business Processes Extending Beyond the Enterprise
Need for secure, inter-company collaboration driven byglobalization, free agency, customer intimacy
2

Current State for UC: Islands of Productivity Interconnected by the PSTN
Company A
Cisco
Unified CM
PSTN
Gateway
Insidethe Organization:
Voice
Video
Wideband Audio
Rich Caller ID
Presence
Alert on Available

BetweenOrganizations:
Current State for UC: Islands of Productivity Interconnected by the PSTN
Company A
Company B
Session Manager
Cisco
Unified CM
PSTN
Gateway
PSTN
Gateway
Insidethe Organization:
Video
Voice
Wideband Audio
Rich Caller ID
Presence
Alert on Available
Voice ONLY

The Growing Disparity ……
BASIC VOICE
BASIC VOICE
Joe
123
Joe
123
CALLING NAME/NUM
CALLING NAME/NUM
ALERT ON AVAILABLE
COLLAB
Enterprise
Public
Video
Roster
Rich Caller ID
Unified Communications
Is landlockedby the PSTN
time

Cisco Intercompany Media Engine
The Cisco Intercompany Media Engine (IME) represents the first time that companies can conduct secure, high-quality, voice and video telephone calls across the internet - using their existingtelephone numbers - without the need to re-provision or replace currently deployed infrastructure.

Intercompany Boundary-Less Communications Among Business Partners and Customers
Cisco Intercompany Media Engine
Submitted to IETF: Accelerating business value through standardization
Enterprise video telephony and high fidelity wideband audio across companies
Enables innovative collaboration capabilities and applications to be shared among partners
Secure, efficient network utilization with reduced costs
Utilizes SIP and PSTN coexistence
Multiple levels of security plus voice spam blocking
Effortless for users and administrators
Easy to use: Self learning
Consistent user experience
Company A
AtoZ, Inc.
Company B
Borderline, Inc.

PSTN
PSTN
Gateway
PSTN
Gateway
Cisco
Unified CM
Cisco
Unified CM
Internet
Extranet
Enterprise B
Enterprise A
Moves Calls from PSTN to Direct SIP Trunks Automatically
SupportsExisting Phones & Numbers
Worldwide Unlimited Scale
Low Provisioning – Self Learning
Saves Costs
Secure
Works with or without Service Provider
Automated Spam Blocking
Brings Full UC Experience
QoS Insurance via PSTN
Internet or Extranet

How It Works - Cisco IME High-Level Call Flow
All participating enterprise configure Cisco IME and their phone numbers
Enterprise IME Servers then:
Form worldwide P2P network
Publish phone numbers they “own” to P2P network
First call to a number goes over the PSTN
PBX in both enterprises send call info with start and stop time to their IME Servers. This forms a shared secret
Later, the IME Servers performs call validation to servers in P2P network that claim to “own” the number
Provides proof of that previous PSTN call went to the IME server that claims to “own” the number
IME
Internet/
Extranet
IME
IME
IME
Enterprise
A
Enterprise
B
PSTN

How It Works Cisco IME Call Flow
Upon successful validation, the originating side IME Server securely pushes learned route to the PBX
The next call placed to that phone number is a Secure Business to Business call over the IME SIP Trunk instead of PSTN.
Seamless Fallback to PSTN if QoS problems detected
IME
Internet/
Extranet
IME
IME
IME
Enterprise
A
Enterprise
B
PSTN

How Cisco Intercompany Media Engine Works
Session ManagementEdition
Unified CM SessionManagement Edition
PSTN
Company A
Company B
IntercompanyMedia Engine
IntercompanyMedia Engine
IP Network
Firewall
Firewall
PBX
1. Employee at Company A places a DID voice call to colleague at Company B
2. At completion of call, respective Session Management Edition systems send call details to Cisco Intercompany Media Engine
3. Company A’s IME initiates validation with Company B’s IME and returns a SIP route and validation ticket to Company A’s Unified CM Session Management Edition, via IME
4. Next time employee at Company A calls colleague, Unified CM Session Management Edition places an SIP call over the IP network and sends the ticket in the header to Company B’s firewall to enable the rich media session to securely pass

Cisco IME Security built-in from ground-up
All IME traffic is encrypted - media and signaling (TLS+SRTP)
Encryption at perimeter firewall - no need to turn on security in your entire enterprise
End to end secure media if both phones are in secure mode
Dial plan information in the Cisco IME network is hashed. 128 bit node id’s stored not numbers.
False number advertisement prevention
Spam protection - blocks unwanted calls right at the firewall
Protection against Denial of Service Attacks on CPU, memory. and bandwidth
Spam

Combining Three Powerful Technologies
To provide the first mechanism to move calls from the PSTN and securely send them over any IP network
DHT:
PSTN:
SIP:
For Scale (testimony of Scale is Skype with > 500 Mill Users and > 50 Mill users online at a time)
For validation of phone number ownership
For its flexibility and feature delivery

Enabling a Collaboration “Network Effect”
Hosted Boot Strap Server APAC
Company “A” SIP Trunk
Company “B” SIP Trunk
Company “N” SIP Trunk
Hosted Boot Strap Server North America
Hosted Boot Strap Server EMEA
Company “C” SIP Trunk
Hosted IME Boot Strap Servers that authenticate, distribute configuration, look for bad guys, send upgrade notifications, license management and more
RCDN 8.0
CUCM
ViPRNet
Public Internet
Service Provider Hosted IME Servers
Company “E” SIP Trunk
SP Network
Company “D” SIP Trunk

IETF Submissions:
draft-rosenberg-dispatch-vipr-overview
draft-rosenberg-dispatch-vipr-pvp
draft-rosenberg-dispatch-vipr-reload-usage
draft-rosenberg-dispatch-vipr-sip-antispam
draft-rosenberg-dispatch-vipr-vap
draft-ietf-p2psip-reload
ViPR: VerificationInvolvingPSTNReachability
ViPR Standardization Efforts
Encouraging Industry-Wide Interoperability from the Start

Cisco Intercompany Media Engine Deployment Components
Cisco Media Convergence Servers (MCS) for Cisco IME Server with HP and IBM Software equivalents
Large 7845 up to 40,000 users
Small 7825 up to 10,000 users
Cisco ASA 5500 Series Adaptive Security Appliances (ASA):
5510, 5520, 5540, 5550 and 5580 .
Version 8.3
Cisco Unified Communications Manager 8.0
Cisco ASA 5500
Cisco Unified CM 8.0

Architecture
Cisco ASA 5500 Series
Notifies UCM of need to fall back
Provides TCP/ (TLS) Conversion
Provides RTP/SRTP Conversion
Ticket Validation (Using Shared Secret between ASA and IME Link Server)
Cisco IME Server
Sits in DMZ
Participates in P2P Network
Provides Call Validation
Sends Route updates to UCM
Cisco Unified Communications Manager 8.0
Receives updated routes from IME Server; updates dialplan.
Publishes DIDs to IME Link Server
Executes PSTN Fallback
Enrollment Server hosted by GoDaddy.com
Certificate Authority for IME Server Certificate
IME Server 8.0
UCM 8.0 / SME 8.0

Deployment ModelsThree Main Integration Models:
ViPRNet
ViPRNet
ViPRNet
Native Cisco Unified CM 8.0 Integration
Cisco IME Integration for Cisco Unified CM 6.x and up, with a Cisco Unified CM-SME front end
Third Party PBX integration With CM-SME front end
1
2
3
Unified
CM 8.0
Unified
SME 8.0
Unified
CM 6.0
Unified
SME 8.0
3rd PartyPBX
SIP
SIP
ASA
ASA
ASA
PSTN
PSTN
PSTN
Native 8.0 Integration
Cisco IME Integrationwith Unified CM 6 +
Third PartyPBX Integration

2025 - Intercompany Media Engine

by IMTC on Jun 15, 2010

Accessibility

Categories

Tags

Upload Details

Usage Rights

2 Embeds 14

Statistics

2025 - Intercompany Media Engine — Presentation Transcript

http://blog.imtc.org	13
http://www.slideshare.net	1