SOLUTION

BLUEPRINT

TELECOMMUNICATIONS

Converged Voice, Video, and

Data Solution
Industry
Telecommunications
Business Challenge
Tapping the revenue potential of Internet protocol
networking capabilities
Technology Solution
Voice over IP Virtual Private Network solution from NetCentrex
Carrier/Service Provider Platform
Intel Carrier-Grade Servers and Communication Building
Block Products

SOLUTION ARCHITECTS

MEETING NEW MARKET DEMANDS

The convergence of voice, data, and video over a managed network framework gives
companies a compelling set of services that reach new corporate customers and take
maximum advantage of the efficiencies of Internet Protocol (IP) networking. The
NetCentrex Voice over IP (VoIP) Virtual Private Network (VPN) solution, a component
of the IP Centrex suite, offers not only cost-effective VoIP tools to lower organizational
communication expenses, but also an extensive range of additional services utilizing VPN
technology to distribute data and video. The Intel-based NetCentrex solution lets companies employ a single, converged communication channel for video conferencing, instant
messaging, unified messaging, network-based contact centers, and IP Centrex operations.

Solution Blueprint:
Converged Voice, Video,
and Data Solution
Solution Provider:
NetCentrex

The NetCentrex solution supports communication access from off-the-net callers through
a VoIP gateway, remote users through the Internet, and mobile users employing wireless
IP phones. Handheld devices based on Intel XScale technology gain a secure, untethered
access channel for messaging. Without sacrificing investments in existing private branch
exchange (PBX) switching equipment, companies deploying the NetCentrex solution
gain an IP-based, multi-faceted communication channel designed to reduce expenses and
ensure a rapid return on investment (ROI).
Intel offers a comprehensive set of carrier-grade, standards-based components for
telecommunications systems that enable the creation of highly available, yet cost-effective
solutions, like the NetCentrex VoIP VPN.
THE BUSINESS CHALLENGE

The expanding geographic reach of multinational enterprises calls for a unified strategy for
managing global communications and reducing the costs to maintain worldwide contacts.
Smaller organizations also benefit, from technologies that reduce dependence on expensive
leased lines, fragmented telephone bills, and non-integrated communications systems.
Multinational corporations with dozens of large campuses around the globe, and smaller
firms with remote offices and home workers, share a common need. Both large and
small enterprises are asking telecommunications service providers for a way to deploy
and manage new services centrally, while extending the reach of services to the widest
range of staff membersregardless of whether their preferred method of contact is the
Internet, mobile phone, or conventional switched phone services.
Given the prevailing landscape within which service providers operate, it is difficult to
build a competitive advantage by offering only Data VPN. To gain differentiation from
competitors, service providers must address issues of quality of service (QoS), servicelevel agreements (SLA)particularly in the area of bandwidth guaranteesand overall
service pricing. Voice services over IP networks represent 70% of revenues, even though
data represents 70% of the total network traffic. This potential revenue channel offers
additional promise when coupled with other servicessuch as video conferencing and
data transporton a single infrastructure that requires little investment in new equipment.

To be effective, a VoIP and converged data solution must offer a deployment roadmap
that allows services to be introduced and implemented incrementally. Ideally, this type
of service should support integration with conventional PBX switching networks that
may already be in use within an enterprise. To maximize profit potential, the solution
should support a wide range of IP networking services, qualifying for the distinction of
being a multi-service VPN designed for the greatest flexibility and deepest use of the
communication channel. A well-designed, converged solution affords enterprises with an
open-ended, evolving scope of services that can encompass advanced features, such as
800-number routing, voice portals, video and audio conferencing, and support for virtual
call centersas well as other services that may be developed for this mode of delivery.
THE SOLUTION OVERVIEW

The NetCentrex VoIP VPN solution consists of an application overlay residing on top of
any IP connectivity technology. This approach lets multiple corporate sites communicate
using their own dial plans. The solution can be deployed independently or in conjunction
with existing data VPNs. Functionality can be increased incrementally, addressing corporate
growth, changing business requirements, and expanding user needs.
The primary components of the NetCentrex VoIP VPN solution include:
NetCentrex Call Control Server (CCS) Softswitch with a Call Routing VPN
software license and VPN provisioning tool
NetCentrex Media Control Server designed for distributing network announcements
and handling basic voice-mail resources (optional)
NetCentrex Personal Call Manager (PCM) license for the CCS Softswitch, offering
user-based routing profiles and personal call management features (optional)
Third-party vendor components for VoIP Gateways, such as intelligent access
devices, Internet PBXs (iPBXs), and IP phones
Third-party vendor components for Billing, Operational Support System/Office of
Acquisition Management and Policy (OSS/OAMP), as well as network management and service provisioning

As shown in the following diagram, the NetCentrex solution provides connectivity

throughout the managed IP network for users at a variety of sites, with different modes
of connectivity.
Multiple Networks
and Services

Data/LAN

Access
Data
Provider

Remote
Offices

Voice
Provider

The NetCentrex VoIP VPN solution

forms the centerpiece of the
NetCentrex IPCentrex Managed
Services suite. This suite includes the
Saga800 Virtual Contact Center
and the IPCentrex Networked
Office solutions.

Suppliers

Telephony
ISDN
Provider

Partners
Collaboration
Internet
Provider
Customers

Web
Applications

Mobile
Provider
Wireless

TECHNOLOGY
CALL CONTROL SERVER (CCS)

The Call Control Server comprises the following:

CCS SoftswitchScalable to system demand. Has the capacity to support a
linear increase in simultaneous calls and calls per second by adding switching units
(SUs). Supports all the carrier-class redundancy and fault-tolerance features
required by service providers.
System Master Unit (SMU)Instrumental in achieving true carrier-class
reliability and fault tolerance. All calls are directed to the SMU and then
distributed to available CCS Switching Units. Each SMU centralizes Simple
Network Management Protocol (SNMP) capabilities, makes sophisticated call
load distribution algorithms available to the SUs, and performs proactive SU
monitoring to ensure uninterrupted call completion. Automatic failover to a
back-up SMU assures seamless, carrier-class, fault-tolerant operation.
CCS Softswitch Switching UnitHandles core call control and switching
technology. The Intelligent Network (IN)-based design enables the creation of
VoIP independent services that use an IN state machine and Q.1224 triggers.
Thus, both the core Softswitch services and applications are available to all
supported VoIP protocols (such as H.323, Session Initiation Protocol [SIP], and
ipGen MGCPdepending on selected protocol options), endpoints, and networks.
The SU also includes a comprehensive Class IV call routing engine, configurable
through a telnet interface. The routing engine enables a two-level dial plan
translation. The following translations are enabled:
From the source format to the pivot format that will be used by the
accounting system
From the pivot format to the destination format

 Shared Registration Database (SRD) UnitHandles Customer Premise

Equipment (CPE) registration by storing all registered endpoints or gateways in a
memory-resident database. Automatic failover to a backup SRD assures seamless
carrier-class, fault-tolerant operation. The SRD is used for limited deployments
only. For large-scale deployments, NetCentrex recommends using a distributed
architecture with an external access domain, as described above.
Subscriber Access Unit (SAU)Provides multi-line features (such as call hold
or 3-way conferencing) to residential gateways or IP phones using the MGCP
protocol. It is not used for Class IV service, but when IP Centrex features are
required, the SAU also provides Computer Telephony Interface (CTI) features.
Accounting Master Unit (AMU)Provides centralized collection and delivery
of CCS Softswitch call detail reports (CDRs) to external billing databases. With
appropriate options, the AMU can interface to third-party, real-time billing
systemsincluding those from Portal Software, MIND CTI, Digiquant, and
High Deal. Automatic failover to a backup AMU ensures seamless, carrier-class,
fault-tolerant operation.
Specific Products (including all elements SMU, SU, PTU, SAU):
HP Compaq Chassis: DL320, Intel Pentium III processor
Operating System: RedHat* Linux* 7.1
MEDIA CONTROL SERVER (MCS) MEDIA SERVER

MCS, the NetCentrex VoIP Media Server solution set, is a robust and scalable platform
for the development of value-added services applications, supporting thousands of
simultaneous calls in a wide variety of telecom configurations. MCS in its three major
configurations for service providersIntelligent Peripheral, Interactive Voice Response
(IVR), and Service Nodeis a tool for the implementation of multiple customers
applications, such as network announcements, unified messaging access, 800 services,
prepaid services, and Fixed/Wireless/VoIP convergence.
For this platform, MCS comes with a network announcement application, enabling
mapping of calls to certain numbers that provide access to pre-recorded announcements.
These announcements are pre-compressed using one or more voice or video coders.
MCS options include:
Advanced Call Routing Option (required to provide VoIP VPN services)
Adds more capabilities to the Class IV routing engine of CCS. With the advanced
call routing engine, CCS can define the following:
Routes based on the destination of a call and also on the source of the call
Private dial plans
Numbering shortcuts for specific edge domains or specific devices

For more details on the VoIP VPN application, refer to the VoIP VPN section on the
NetCentrex Web site: http://www.netcentrex.net/products/VoIP_Virtual_Private_Net.shtml
Protocol Translation Unit (PTU) OptionProvides an H.323-to-SIP and SIP-toH.323 protocol translator. It is required for specific service provider configurations
where both SIP and H.323 protocols are used, such as inter-domain connections,
multi-vendor terminals, mixed networks, network peering between service providers,
and where connecting and working between the two protocols is necessary.
The call control in the CCS architecture is independent of the underlying protocols
(known as protocol abstraction). Nevertheless, some features or topologies specific to
each protocol require treatments to overcome the non-overlapped functions, such as the
H.245 relay function. The PTU is designed to carry out these functions on an external
resource, such as a CPU separated from the Switching Unit, thereby optimizing the
processing distribution.
The PTU offers the following features:
Translation from incoming SIP calls to outgoing H.323 calls
Translation from incoming H.323 calls to outgoing SIP calls
Translation of out-band dual tone multi frequency (DTMF)
Registration OptionIn a Class IV configuration, most edge devices communicate
with the Class IV core using either a direct call setup to the IP address of the system,
or a location request. The Class IV core does not need edge devices to register
because CCS knows the IP addresses of all the devices it manages directly, or can
learn these IP addresses dynamically by using Location Request Query (LRQ)
messages. However, if registration is necessary for a particular edge device (for
instance, if it cannot be disabled), an optional SRD is added to the system to
accept and store registration information. NetCentrex guarantees interoperability
only with edge devices that are listed in the interoperability list.
Specific Products
Netcentrex Media Control Server (MCS)
- Intel Dialogic Boards: Intel DMV Boards, Intel Dialogic DMIP0821A and
Intel Dialogic DMIP3031A, Intel Voice Portal Reference System
- Supported OS: Windows* 2000, Windows* NT, Linux*, Tru64*
Netcentrex MCS-AS (Application Server):
- Intel Dialogic Boards: Intel DMV Boards, Intel Voice Portal Reference System
- Supported OS: Windows* 2000, Windows* NT, Linux*, Tru64*
- Supported Speech Technology Vendors: SpeechWorks*, Nuance*, PhilSoft*

 High-availability OptionService providers may want to use a fully redundant

platform in order to minimize network outages, which may distort the user perception of what the production service would be. NetCentrex can provide the platform
in a fully redundant N+1 configuration. No further investment in redundancy hardware is required if the platform grows, because CCS uses an N+1 redundancy
strategy, therefore not all components need to be doubled.
The high-availability option provides the following features:
Eliminates single points of failure in the system
Enables modification of system hardware and software without stopping
operations
Allows fully redundant network wiring and connectivity (requires redundant
routers in the service provider network, use of a Hot Standby Router Protocol
[HSRP] or a similar health check, real-time protocol, and appropriate routing
protocols)
The high-availability option adds the following components:
One additional SMU
One additional SU
One additional SRD (if present)
One additional PTU (if present)
One additional AMU
One additional Media Server (MCS), if present
Double LAN option enabled on all servers and an extra Ethernet switch.
Intel Corporation is shipping its first carrier-grade server building block products that
conform to stringent telecommunications reliability requirements. These platforms bring
new levels of cost efficiencies, higher performance, greater choice, and scalability to
telecommunication and service provider customers requiring rugged, highly available
computing solutions.
The new server products conform to strict reliability requirements as defined by the
Network Equipment Building Specification (NEBS) and European Telecom Standards
Institute (ETSI). Carrier-grade servers comply with telecommunications industry requirements for platform ruggedness to survive environmental hazards such as excessive heat
and cold, fires, and earthquakes. Most recent announcements consisted of two carrier-grade
server platforms from Intel. The first is a 2U-sized dual processor server, and the second
will be a 1U, dual-processor form factor. 1U is a unit of measurement of 1.75 inches.
Intels world-class building block products and open computing model offer telecom
and service provider customers lower costs, greater investment protection, and an opportunity to deliver services and innovations faster, said Mike Fister, Vice President and
General Manager of Intels Enterprise Platforms Group.1 Unlike traditional RISC-based
platforms, Intel-based solutions provide the flexibility, choice, raw performance, and
scalability to address the needs of the telecommunications market. The new product
family will initially include Intel Pentium III processors in high-density form factors,
offered with a choice of operating systems such as Windows*, Linux*, and Unix*.
Carrier-grade servers based on the Intel Xeon and Itanium processor families are
expected in the future. The Intel-based systems will power core telecom, wireless, and
communication infrastructure for use in high-speed, high-traffic networks used by the

6
1

http://www.intel.com/pressroom/kits/bios/fister.htm

carriers, telecom service providers, and large corporations. The platforms will run a wide
range of wire line and wireless applications, such as software-enabled switches or soft
switches used to bridge the telephone network and Voice over Internet Protocol (VoIP).
These servers are also capable of providing unified messaging services (which handle
voice, fax, and regular text messages as objects in a single mailbox that users can access
via e-mail client or by telephone) and Virtual Private Network (VPN) services (advanced
encrypting and decrypting technologies to companies allowing secure sharing of public
telecom resources for data transmission).
WHO THE SOLUTION WILL BENEFIT

The Intel-based NetCentrex solution favors organizations that include international IP

carriers, nationwide service providers, Internet service providers, and mobile telecommunication carriers. These types of organizations gain considerable benefit from the flexibility and scalability inherent in the solution.
The linearly scalable design of the NetCentrex VoIP CCS Softswitch lets service providers
install only the required capacity at the time it is needed, and scale smoothly during periods
of increased customer demand. The centralized organization of the NetCentrex VoIP VPN
solution does not require specific voice equipment to be deployed in a point of presence
close to the customer premises. Installed VoIP VPN switching capacity is immediately
available to all corporate customers connected to the IP backbone. This capability makes it
easy to sell the installed capacity, providing a very short ROI. These features make a compelling argument to high-level officers within corporations considering the technology,
such as the Chief Financial Officer (CFO) and the Chief Technical Officer (CTO).
The NetCentrex VoIP VPN Solution is also completely compliant with the 3rd
Generation Partnership Project (3GPP) reference architecture, which makes it deployable
in 3rd Generation mobile networks such as the Universal Mobile Telecommunications
Service (UMTS). According to the specific terminology of 3GPP, the CCS Softswitch is
then called a Call Session Control Function (CSCF) and the SVI-MCS Media Server is
then called a Media Resource Function (MRF). Furthermore, the CCS Softswitch offers
Camel Application Part (CAP) and Intelligent Network Application Part (INAP) interfaces to existing Service Control Points (SCPs) that enable the convergence of existing
IN-based applications with Next-Generation VoIP-based networks.

CASE STUDY/PROOF POINTS

EQUANT GLOBAL VoIP VPN SERVICES

Equant, a member of the French Telecom group was created from the merger of Global
One and SITA Equant. Equant delivers network connectivity as well as voice and data
services to large enterprises around the world. In 2001, Equant generated over $3 billion
in revenues. The company employs over 10,000 skilled professionals with a presence in
220 countries and territories. Currently, 3,700 large business customers use services
from Equant.
The Equant solution runs on a platform featuring NetCentrex and Hewlett-Packard technologies. The NetCentrex CCS Softswitch executes, controls, and manages call routing
information within the IP network. The CCS has trigger points and interrogates the
application servers for all VPN features through an Intelligent Network interface. The
Softswitch provides gateway interoperability, multiprotocol softswitch (SIP and H.323)
functions for the VoIP network, intelligent interrogation of the VPN service, and includes
a Q1224 state machine with IN trigger support.
HP* Opencall* SMP hosts the central repository, service provisioning, and Web server.
The application server is based on HP Opencall SEP.
Details about this case study can be found in the NetCentrex Service Provider Overview
and the VoIP VPN Solution product brief. For more information, visit the following
Web sites: www.netcentrex.net/products/VoIP_Virtual_Private_Net.shtml
www.equant.com/content/xml/prod_serv_ipvpn.xml
SOLUTION PERFORMANCE SUMMARY

NetCentrex uses a clustered, load-balancing configuration with a Linux* operating

system. Switching Master Units make up the load-balancing front-end that distributes the
calls to the Switching Units. Calculation of platform availability depends on the Intel
Architecture-based PC mean-time-between-failures (MTBF). In the following example,
where 99.99954% availability is obtained, the assumption is that one breakdown occurs per
PC, per year. If the PC MTBF is superior to 365x24 hours, then the availability is higher.
Example

In this example, the percentage of lost calls is calculated. This percentage is then converted to equivalent minutes based upon the number of averaged simultaneous calls and
averaged calls per second. The CCS configuration used in this example is the largest one
supported by NetCentrex with the current version of CCS (Version 3.5). This configuration handles 15,000 simultaneous calls. It includes two SMUs (a master and slave in a
redundant cluster) and 50 SUs.
A breakdown of the load-balancing front-ends (SMU and the switchover) will result in
the CCS losing very few calls. Only those calls for which the setup occurs exactly at the
time of the breakdown will be lost. Typically, a breakdown will result in one second of
downtimethe time required for the slave SMU to switch over to become the master
during which 100 calls will be lost. If calls last 180 seconds, about 100 out of 15,000
calls will be established every second.
When an SU breaks down, the CCS will first lose established calls and then eventually
the calls presented to the SU before the detection of the breakdown. Out of the 300
calls handled by each SU, two calls will be in the process of being established every
second. If a check is made for a breakdown every 30 seconds, then up to 60 calls can
be lost. Once the SU breakdown has been detected, no more calls are lost. Thus, the
worst-case scenario for one SU breakdown is 360 lost calls.
8

For example, over one year, a CCS with 15,000 simultaneous calls lasting 180 seconds will
support (100 x 3600 x 24 x 30 x 12)which equals 3,110,400,000 calls. If one SMU breakdown occurs (100 calls) per year and one breakdown per SU occurs (50 x 360 calls) per
year18,100 calls will be lost during that year. This is equivalent to a system availability
of 0.999994 (3110400000-18100/3110400000).
A more precise evaluation of the number of SU and SMU breakdowns per year could be
evaluated using the manufacturers MTBF for each PC in the system. However, making
the assumption that every PC will have one breakdown per year can be considered as a
worst-case scenario. The numbers calculated in this example are valid for all hardware
for which the instance probability of yearly breakdown is less than, or equal, to 1.
SOLUTION BENEFITS

The Intel-based NetCentrex VoIP VPN solution brings a number of value-added services
to both end users and service providers who are moving beyond traditional telephony
methods. Benefits include:
A Simple, Inexpensive Path from Data to VoiceExisting data VPN networks can
be inexpensively enhanced to include converged access to voice and multimedia.
Reduced Corporate Communication CostsBundling voice and data requirements helps reduce access costs throughout a corporation. Optimizing the bandwidth
requirements over IP VPN can reduce the costs of wide-area networks (WANs).
Reduced Equipment RequirementsA single local area network (LAN) PBX
installed at a major location services switching needs. Fewer skilled personnel are
needed to administer the physical equipment.
Ready-to-Use ApplicationCost savings realized through this solution do not
require any change to the internal existing telephony infrastructure. By adding the
NetCentrex VoIP VPN solution to the network, service providers can bring
advanced services to their corporate customers.
Simplified Access for the Remote WorkforceThrough single-step dialing, or a
voice portal, the home or remote user can directly access the company VPN and
all its services.
Reduced Travel Costs through ConferencingBuilt-in conferencing and teleconferencing features can help reduce the need for extensive travel by staff members. The single VPN platform serves to extend conferencing services throughout
the geographic reach of the corporation.
Increased ROI and Expanded Revenue ChannelsAdding voice and video to
the range of services offered by a telecommunications carrier or ISP can generate
additional revenues quickly, and lead to a substantial ROI.
Easily Deployed and Single-network SolutionThe solution, including voice,
video, and data services, can be managed and supported from a single network.
When additional capacity is required, this approach makes it simple to expand the
network capabilities.

FUNCTIONAL BUSINESS CONCEPT

A number of factors lead to limited network flexibility and increased costs, including
the use of multiple suppliers, price schemes, complex service requirements for switching
circuits, CPE, billing techniques, difficult to administer help desks, and multiple points
of failure.
The NetCentrex VoIP solution offers a single broadband connection that dynamically
integrates voice, data, and multimedia traffic onto one common network, router, and
access circuit. The traditional data circuit absorbs the voice traffic.

Remote Users,
Teleworkers, and
Road Warriors

Internet
(Virtual On-Net)
PSTN Off-Net
Calling

Managed IP Network
NetCentrex
Softswitch

CPE Site 3

Access GK or
SIP Registar

VoIP
Gateway

User Profile
Database
Wireless
IP Phones

Wireless IP
Router

H.323-MGCP-SIP

Broadband
Provider

NetCentrex
Media Server
CPE Site 2
CPE Site 1
IAD with VoIP
Gateway Capability

iPBX

PBX

10

USER EXPERIENCE

Site Settings
Company and network provisioning
can be accomplished through a Webbased interface. Gateway provisioning is accomplished automatically.

Advanced Management Features

The settings for VPN services
can be administered through a
convenient, tree-structured settings
pane. These features include
PNP management, calling card
services, a variety of on-net/off-net
call options, enhanced least-cost
routing, and security management.

11

S O F T WA R E A R C H I T E C T U R E

NetCentrex uses a modular approach that incorporates the VoIP network into a layered
architecture. This architecture has the following components:
Edge DomainResponsible for peer relationships with all third-party networks,
including the public switched telephone network (PSTN) and other VoIP networks
that may be used to terminate calls.
Core Class IV DomainResponsible for routing calls between all other domains,
as well as for Local Number Portability and Emergency callswhen required.
Set of Application DomainsResponsible for advanced features, such as Class V
call control.
Set of Access DomainsResponsible for the direct management of CPEs,
including IP address and alias registrations. This domain is most useful in the
context of a Class V telephony service and is not needed for simpler services,
such as voice VPNs.
This solution focuses on the Class IV domain and its interfaces with other domains.

Access Domain

Access Domain

Access GK

Access GK

Application Domain (e.g. Class V)

Application Domain (e.g. Network IVR)

LDAP/Web Server

NetCentrex SVI
Voice Mail
Legal Intercept

HTTP Servers
and Proxies

NetCentrex SVI
NetCentrex
Voice FrontSVI
End
Voice Front End

LDAP Requests
NetCentrex SPE
Subscriber
Policy Engine

NetCentrex CCS
Softswitch

NetCentrex CCS
Softswitch

Class IV
Domain

AMU/Billing

NetCentrex Solution

Edge Domain

Third-Party
VoIP

Supervision and
Provisioning
Service Provisioning
SNMP/MIBs

NetCentrex CCS
Softswitch

12

NetCentrex
VXML Browser

PSTN

The interface to the PSTN network can be one of the following:

Integrated Services Digital Network (ISDN) GatewaysConvert VoIP calls to
ISDN calls and vice versa. Most service providers today use ISDN gateways in
relatively low-density configurations. This maximizes the density of the network,
with many small voice point-of-presence (POP) access points rather than few large
ones. Analog connections are to be avoided, if at all possible, to preserve call detail
report accuracy. In some instances, Signaling System 7 (SS7) connectivity with
low density is required for legal or technical reasons. In such cases, a connection
of an ISDN gateway to a small PSTN switch with SS7 interfaces can be a costeffective solution.
Large SS7 GatewaysMay be stand-alone devices or decomposed; devices comprising a Call Agent (also called a Media Gateway Controller), and several media
gateways. As long as the Call Agent supports the International Telecommunication
Union H.323 standard (with or without LRQ) or Session Initiation Protocol (SIP)
as an inter-Softswitch protocol, it can be used within the edge domain. Decoupled
gateways using non-standard protocols between the Call Agent and the media gateways can also be connected to the Class IV core if H.323 or SIP and Real-Time
Transport Protocol (RTP) are used as inter-Softswitch protocols.

SS7 Call
Agent
ISUP

IP Network

Typical SS7 Distributed Gateway

Connected to the Class IV Core

H.323/H.246 or SIP/T

SS7 STP

MGCP/T
RTP
Class IV
PSTN
Switches

Class IV
Domain

MGCP Trunking
Media Gateways

MGCP/T
RTP

EDGE DOMAIN

The edge domain might implement its own call-routing or load-balancing policies using,
for instance, infrastructure gatekeepers monitoring the state and load of several PSTN
gateways. This is transparent to the Class IV domain as long as infrastructure
Softswitches offer an LRQ-based interface for H.323, or use SIP.
The edge domain may also be used for direct trunking applications that do not require
any service, such as leased line emulation or pure SS7 trunk emulation. In this case
some calls may not be relayed through the Class IV domain.
CORE DOMAIN

The role of the Class IV domain is to route calls between application domains, between the
edge components, and between edge components and application domains. It contains the
central routing configuration of the network, including least-cost-routing features and also
implements the local number portability feature when required. It does not prevent the
edge components from doing their own call routing within the edge domain, if relevant.
The Class IV domain is composed of one or more NetCentrex Call Control Servers,
configured as Class IV switches. The Class IV domain supports SIP and H.323 call
control protocols.
13

The Softswitch terminates all calls it receives and may try multiple termination devices
to terminate a call. As a result, the termination rate of a network using a real Class IV
network is much better than the individual termination rates of each termination device
or partner. To do this, the Softswitch is on the path of all call setup messages, such as
H.323-routed mode or SIP stateful proxy. Because it is aware of all call-related events,
a real Class IV switch can create centralized CDRs independently of the gateways. Real
Class IV networks inherently facilitate multi-vendor deployments, so that each vendor
requires only an interoperability test with the Class IV Softswitch.
The call flows in the diagram below show an example of a call that fails in the PSTN
due to congestion, a very common situation when doing least-cost routing. The congestion is reported using a Q850 error code. A light Class IV network cannot recover from
this situation, while a real Class IV network can.
Light Class IV (Direct Mode)
Originating
Gateway

Third-Party
PSTN Network

Terminating
Gateway
Direct Mode GK
ARQ 123456789

PSTN CO

ACF @TGW
Set-up 123456789

Set-up 123456789
Release (Congestion)
Release (Congestion)

The Call Is Lost!

Other PSTN Partners May Have Been
Able to Complete the Call.

The Class V domain is responsible for all subscriber-specific features including:

Unconditional call forwarding
Time-dependent call forwarding
Source-dependent call forwarding
Redirect on busy or no-answer

Calling Line Identification Presentation/

Calling Line Identification Restriction
(CLIP/CLIR) services
Call blocking
Legal interception

To improve scalability, the Class V domain does not maintain CPE registrations directly,
but communicates using LRQs with one or several access domains that maintain this
information.
This distributed design allows issues associated with centralized designs to be resolved
when the network starts. It also facilitates the use of multiple CPE vendors by allowing
the deployment of CPE-specific access servers, if required. See the next section, Access
Domain, for details.
ACCESS DOMAIN

The access domain is composed of direct mode gatekeepers for H.323 (or Registrars
for SIP), usually from the same vendor as the CPE vendor to ensure interoperability of
security mechanisms.

14

The role of access gatekeepers includes:

Maintaining registrations of CPEs, as well as keep-alive registrations
Responding to the Admission Request requests (ARQs) of devices, and pointing to
the Class V CCS for all authorized calls
Blocking call attempts from CPEs to destination numbers not authorized by the
local dial plan (white/black lists, restricted off-net, and others)
In addition, the access domain includes all necessary servers that allow CPEs to download
their firmware and configuration, including the registration alias, security parameters,
and software keys limiting the features of the CPE (for example, multiple call handling
or 3-way conferencing).
If a per-CPE authentication scheme is required, the access domain will also require
authentication servers, such as Radius servers. Using a separate access domain facilitates
the dimensioning of the network. While the Class V and Class IV domains scale according
to the number of simultaneous calls in the network, the access domain scales proportionally
to the number of CPE lines. The relative sizes of the two domains may vary widely
according to the average line usage. A very low line usage (typical of software endpoints)
will require a generous sizing of the access domain, but relatively less capacity in the
Class V domain. A higher line usage requires the exact opposite dimensioning, with a
smaller-sized access domain, but more capacity in the Class V domain).
For endpoints using the MGCP protocol, the NetCentrex SAU performs access management. This unit manages MGCP endpoints registrations, as well as multi-line features
that are not handled by MGCP devices because of the design of this protocol.
SYSTEMS ARCHITECTURE

A complete VoIP solution system architecture encompassing the entire enterprise is

shown in the following illustration. This illustration shows the NetCentrex CCS
Softswitch, which represents the heart of the NetCentrex solution.

A NetCentrex CCS
Softswitch Architecture

Intel Pentium 4 Processor

Load
Distribution

Switching

Switching Unit
System
Master
Unit

10 Rackable Intel PCs

RedHat* Linux* 2.4

Accounting

Switching Unit

Accounting
Master Unit

Switching Unit
Switching Unit

I.N. Services

Accounting
Master Unit

Switching Unit

Application Server
LAN/WAN

IP
Network

Application Server
System
Master
Unit

Access
Protocol
Translation
Unit
Protocol
Translation
Unit

Shared
Registration
Database

Subscriber
Access Unit
Subscriber
Access Unit
Shared
Registration
Database

Subscriber
Access Unit

Modular, Dedicated Processor Design

High Performance and Scalability
(15,000+ Ports)
Fault-Tolerant Operation
Distributed Endpoint Management
CCS Softswitch
Application Server

15

NetCentrex Distributed Architecture

Zone 1
Zone 2 Backup

Zone 2
Zone 1 Backup

150K Users

150K Users
NetCentrex
Softswitch

Zone 3
Zone 4 Backup

NetCentrex
Softswitch

CCS-Based Routing
or
Standard LRQ Inter-Softswitch Call Flow

NetCentrex
Softswitch

Zone 4
Zone 3 Backup

NetCentrex
Softswitch

150K Users

150K Users

The use of a distributed architecture offers the following advantages:

By-passing of CCS Softswitch LimitsOne CCS Softswitch can manage a
maximum of 50 switching units. One SU is able to manage a maximum of
10 calls per second
300 simultaneous calls
3,000 to 15,000 users depending on erlang usage values
Therefore one CCS Softswitch can handle a maximum of:
500 calls per second
15,000 simultaneous calls
150,000 users
The distributed architecture enables sharing of the system load by multiple CCS
Softswitches. Consequently, the platform capacity can be raised.
Preventing Single Points of FailureFrom a geographical point of view, the
distributed architecture prevents single points of failure. If a location loses IP
connectivity, calls can be routed to an alternate location. By taking full advantage
of the NetCentrex Call Routing module, multiple back-up locations can be defined
to provide full telephony service continuity.

16

DISTRIBUTED ARCHITECTURE HARDWARE IMPACT

When a new zone is added to a VoIP telephony network, additional hardware must be
introduced for the following components:
Front-end ComputerTo load balance calls in the additional zone
Media ServerTo duplicate voice resources
Management ServerFor provisioning resources
Introducing a new zone within a distributed architecture does not necessarily increase the
telephony system capacity. For example, a mono-CCS platform managing 60,000 users
requires 20 SUs to handle these users assuming 1-10 concentration. After migration to a
multi-CCS architecture, the SUs can be shared between the two different zones (10 SUs
for each zone).
S U M M A RY

Voice over IP is only one component of a successfully managed VPN network, as the
NetCentrex VoIP VPN solution demonstrates. Telecommunication carriers and Internet
service providers can offer enterprises a more comprehensive set of services that
includes video conferencing and data through multiple access channels. The VoIP VPN
Service also seamlessly provides VoIP trunking facilities and interconnection to iPBXs.
Such services provide an additional revenue channel, as well as the means to help enterprises reduce their global communication costs. This powerful, cost-effective solution,
based on Intel carrier-grade servers, brings scalable, reliable communication tools to
large organizations. The Intel-based NetCentrex VoIP solution brings benefits to service
providers extending these capabilities, as well as to enterprises seeking an affordable and
centralized means of organizing their communications.

L E A R N M O R E A B O U T T H I S I N N O VAT I V E S O L U T I O N

For general information about the products described in this solution blueprint, visit:
www.netcentrex.net
www.intel.com/go/solutionblueprints
If you have a specific question about implementing this solution within your organization,
contact your Intel representative or e-mail us at: solutionblueprints@intel.com

Performance tests and ratings are measured using specific computer systems and/or components and reflect the approximate performance of Intel products as measured by those tests. Any difference in system hardware or software design
or configuration may affect actual performance. Buyers should consult other sources of information to evaluate the
performance of systems or components they are considering purchasing. For more information on performance tests and on
the performance of Intel products, reference www.intel.com/ebusiness or call (U.S.) 1-800-628-8686 or 1-916-356-3104.

17

NetCentrex, the NetCentrex logo, and IPCentrex are service marks or registered trademarks of NetCentrex S.A.
Copyright 2002 NetCentrex S.A. All Rights Reserved.
Intel, the Intel and Intel Inside logos, Pentium and Xeon are trademarks or registered trademarks of Intel Corporation or its subsidiaries
in the United States and other countries.
Copyright 2002 Intel Corporation. All Rights Reserved.
*Other names and brands may be claimed as the property of others. Information regarding third party products is provided solely
for educational purposes. Intel is not responsible for the performance or support of third party products and does not make any
representations or warranties whatsoever regarding quality, reliability, functionality, or compatibility of these devices or products.

251178001