 |  |
| | |
The sip:carrier provides plenty of subscriber features to offer compelling VoIP services to end customers, and also to cover as many deployment scenarios as possible. In this chapter, we provide the features overview and describe their function and use cases.
The sip:carrier offers the platform operator with an easy to use interface to manage users with administrative privileges. Such users are representatives of resellers, and are entitled to manage configuration of services for Customers, Subscribers, Domains, Billing Profiles and other entities on Sipwise NGCP.
Administrators, as user accounts, are also used for client authentication on the REST API of NGCP.
There is a single administrator, whose account is enabled by default and who belongs to the default reseller. This user is the superuser of the NGCP administrative web interface (the so-called "admin panel"), and he has the right to modify administrators of other Resellers as well.
Configuration of access rights of system administrators is possible through the admin panel of NGCP. In order to do that, please navigate to Settings → Administrators.
You have 2 options:
There are some generic attributes that have to be set for each administrator:
1, Name: default), but the administrator has to be assigned
to his real reseller, if such an entity (other than default) exists.
The second set of attributes is a list of access rights that are discussed in subsequent section of the handbook.
The various access rights of administrators are shown in the figure and summarized in the table below.
Table 1. Access Rights of System Administrators
Label in admin list | Access Right | Description | |||
|---|---|---|---|---|---|
not shown | Is superuser | The user is allowed to modify data on Reseller level and — among others — is able to modify administrators of other resellers. There should be only 1 user on Sipwise NGCP with this privilege. | |||
Master | Is master | The user is allowed to create, delete or modify other Admins who belong to the same Reseller. | |||
Active | Is active | The user account is active, i.e. the admin user can login on the web panel or authenticate himself on REST API; otherwise user authentication will fail. | |||
Read Only | Read only | The user will only be able to list various data but is not allowed to modify anything.
| |||
Show Passwords | Show passwords | The user sees subscriber passwords (in plain text) on the web interface.
| |||
Show CDRs | Call data | This privilege has effect on 2 items that will be displayed on admin panel of NGCP, when Subscriber → Details is selected:
| |||
Show Billing Info | Billing data | Some REST API resources that are related to billing are disabled: HTTP requests
on | |||
Lawful Intercept | Lawful intercept | If the privilege is selected then the REST API for interceptions (that is:
|
There are two different methods to provide fine-grained call admission control to both subscribers and admins. One is Block Lists, where you can define which numbers or patterns can be called from a subscriber to the outbound direction and which numbers or patterns are allowed to call a subscriber in the inbound direction. The other is NCOS Levels, where the admin predefines rules for outbound calls, which are grouped in certain levels. The subscriber can then just choose the level, or the admin can restrict a subscriber to a certain level. Also sip:carrier offers some options to restrict the IP addresses that subscriber is allowed to use the service from. The following sections describe these features in detail.
Block Lists provide a way to control which users/numbers can call or be called, based on a subscriber level, and can be found in the Call Blockings section of the subscriber preferences.
Block Lists are separated into Administrative Block Lists (adm_block_*) and Subscriber Block Lists (block_*). They both have the same behaviour, but Administrative Block Lists take higher precedence. Administrative Block Lists are only accessible by the system administrator and can thus be used to override any Subscriber Block Lists, e.g. to block certain destinations. The following break-down of the various block features apply to both types of lists.
Block lists can either be whitelists or blacklists and are controlled by the User Preferences block_in_mode, block_out_mode and their administrative counterparts.
You can change a list mode from one to the other at any time.
The list contents are controlled by the User Preferences block_in_list, block_out_list and their administrative counterparts. Click on the Edit button in the Preferences view to define the list entries.
In block list entries, you can provide shell patterns like * and []. The behavior of the list is controlled by the block_xxx_mode feature (so they are either allowed or rejected). In our example above we have block_out_mode set to blacklist, so all calls to US numbers and to the Austrian number +431234567 are going to be rejected.
Click the Close icon once you’re done editing your list.
For incoming call, the User Preference block_in_clir and adm_block_in_clir controls whether or not to reject incoming calls with number supression (either "[Aa]nonymous" in the display- or user-part of the From-URI or a header Privacy: id is set). This flag is independent from the Block Mode.
NCOS Levels provide predefined lists of allowed or denied destinations for outbound calls of local subscribers. Compared to Block Lists, they are much easier to manage, because they are defined on a global scope, and the individual levels can then be assigned to each subscriber. Again there is the distinction for user- and administrative-levels.
If case of a conflict, when the Block Lists feature allows a number and NCOS Levels rejects the same number or vice versa, the number will be rejected.
NCOS levels can either be whitelists or blacklists.
To create an NCOS Level, go to Settings→NCOS Levels and press the Create NCOS Level button.
Select a reseller, enter a name, select the mode and add a description, then click the Save button.
To define the rules within the newly created NCOS Level, click on the Patterns button of the level.
There are 2 groups of patterns where you can define matching rules for the selected NCOS Level:
In the NCOS Number Patterns view you can create multiple patterns to define your level, one after the other. Click on the Create Pattern Entry Button on top and fill out the form.
In this example, we block (since the mode of the level is blacklist) all numbers starting with 439. Click the
Save button to save the entry in the level.
There are 2 options that help you to easily define specific number ranges that will be allowed or blocked, depending on whitelist / blacklist mode:
^431.
In the NCOS LNP Carriers view you can select specific LNP Carriers — i.e. carriers that host the called ported numbers — that will be allowed or blocked for routing calls to them (whitelist / blacklist mode, respectively).
Sipwise NGCP performs number matching always with the dialed number and not with the number generated after LNP lookup that is: either the original dialed number prefixed with an LNP carrier code, or the routing number.
An example of NCOS LNP Carrier pattern definition:
In the above example we created a rule that blocks calls to "LNP_Carr1" carrier, supposing we use blacklist mode of the NCOS Level.
![[Note]](images/icons/note.png){kind=icon} | |
Currently NGCP does not support filtering of individual phone numbers in addition to LNP Carrier matching. In other words: combining phone number and LNP Carrier patterns is not possible. |
![[Tip]](images/icons/tip.png){kind=icon} | |
There might be situations when phone number patterns may not be strictly aligned with telephony providers, for instance in case of full number portability in a country. In such cases using NCOS LNP Carriers patterns still allows for defining NCOS levels that allow / block calls to mobile numbers, for example. In order to achieve this goal you have to list all LNP carriers in the NCOS patterns that are known to host mobile numbers. |
Once you’ve defined your NCOS Levels, you can assign them to local subscribers. To do so, navigate to Settings→Subscribers, search for the subscriber you want to edit, press the Details button and go to the Preferences View. There, press the Edit button on either the ncos or adm_ncos setting in the Call Blockings section.
You can assign the NCOS level to all subscribers within a particular domain. To do so, navigate to Settings→Domains, select the domain you want to edit and click Preferences. There, press the Edit button on either ncos or admin_ncos in the Call Blockings section.
Note: if both domain and subscriber have same NCOS preference set (either ncos or adm_ncos, or both) the subscriber’s preference is used. This is done so that you can override the domain-global setting on the subscriber level.
In some countries there are regulatory requirements that prohibit subscribers from forwarding their numbers to special numbers like emergency, police etc. While the sip:carrier does not deny provisioning Call Forward to these numbers, the administrator can prevent the incoming calls from being actually forwarded to numbers defined in the NCOS list: just select the appropriate NCOS level in the domain’s or subscriber’s preference adm_cf_ncos. This NCOS will apply only to the Call Forward from the subscribers and not to the normal outgoing calls from them.
The sip:carrier provides subscriber preference allowed_ips to restrict the IP addresses that subscriber is allowed to use the service from. If the REGISTER or INVITE request comes from an IP address that is not in the allowed list, the sip:carrier will reject it with a 403 message. Also a voice message can be played when the call attempt is rejected (if configured).
By default, allowed_ips is an empty list which means that subscriber is not restricted. If you want to configure a restriction, navigate to Settings→Subscribers, search for the subscriber you want to edit, press Details and then Preferences and press Edit for the allowed_ips preference in the Access Restrictions section.
Press the Edit button to the right of empty drop-down list.
You can enter multiple allowed IP addresses or IP address ranges one after another. Click the Add button to save each entry in the list. Click the Delete button if you want to remove some entry.
The sip:carrier provides the capabilities for normal call forwarding (deflecting a call for a local subscriber to another party immediately or based on events like the called party being busy or doesn’t answer the phone for a certain number of seconds) and serial call hunting (sequentially executing a group of deflection targets until one of them succeeds). Targets can be stacked, which means if a target is also a local subscriber, it can have another call forward or hunt group which is executed accordingly.
Call Forwards and Call Hunting Groups can either be executed unconditionally or based on a Time Set Definition, so you can define deflections based on time period definitions (e.g. Monday to Friday 8am to 4pm etc).
Go to your Subscriber Preferences and click Edit on the Call Forward Type you want to set (e.g. Call Forward Unconditional).
If you select URI/Number in the Destination field, you also have to set a URI/Number. The timeout defines for how long this destination should be tried to ring.
If you want multiple destinations to be executed one after the other, you need to change into the Advanced View when editing your call forward. There, you can select multiple Destination Set/Time Set pairs to be executed.
A Destination Set is a list of destinations to be executed one after another.
A Time Set is a time definition when to execute this Destination Set.
Click on Manage Destination Sets to see a list of available sets. The quickset_cfu has been implicitly created during our creation of a simple call forward. You can edit it to add more destinations, or you can create a new destination set.
When you close the Destination Set Overview, you can now assign your new set in addition or instead of the quickset_cfu set.
Press Save to store your settings.
Click on Manage Time Sets in the advanced call-forward menu to see a list of available time sets. By default there are none, so you have to create one.
You need to provide a Name, and a list of Periods where this set is active. If you only set the top setting of a date field (like the Year setting in our example above), then it’s valid for just this setting (like the full year of 2013 in our case). If you provide the bottom setting as well, it defines a period (like our Month setting, which means from beginning of April to end of September). For example, if a CF is set with the following timeset: "hour { 10-12 } minute { 20-30 }", the CF will be matched within the following time ranges:
![[Important]](images/icons/important.png){kind=icon} | |
the period is a through definition, so it covers the full range. If you define an Hour definition 8-16, then this means from 08:00 to 16:59:59 (unless you filter the Minutes down to something else). |
If you close the Time Sets management, you can assign your new time set to the call forwards you’re configuring.
The Sipwise NGCP platform comes with two ways of accomplishing local number porting (LNP):
| |
Accessing external LNP databases is available for PRO and CARRIER products only. |
The local LNP database provides the possibility to define LNP Carriers (the owners of certain ported numbers or number blocks) and their corresponding LNP Numbers belonging to those carriers. It can be configured on the admin panel in Settings→Number Porting or via the API. The LNP configuration can be populated individually or via CSV import/export both on the panel and the API.
LNP Carriers are defined by an arbitrary Name for proper identification (e.g. British Telecom) and contain a Prefix which can be used as routing prefix in LNP Rewrite Rules and subsequently in Peering Rules to route calls to the proper carriers. The LNP prefix is written to CDRs to identify the selected carrier for post processing and analytics purposes of CDRs. LNP Carrier entries also have an Authoritative flag indicating that the numbers in this block belong to the carrier operating the sip:carrier. This is useful to define your own number blocks, and in case of calls to those numbers reject the calls if the numbers are not assigned to local subscribers (otherwise they would be routed to a peer, which might cause call loops). Finally the Skip Rewrite flag skips executing of LNP Rewrite Rules if no number manipulation is desired for an LNP carrier.
LNP Carriers contain one or more LNP Numbers. Those LNP Numbers are defined by a Number entry in E164 format (<cc><ac><sn>) used to match a number against the LNP database. Number matching is performed on a longest match, so you can define number blocks without specifying the full subscriber number (e.g. a called party number 431999123 is going to match an entry 431999 in the LNP Numbers).
For an LNP Numbers entry, an optional Routing Number can be defined. This is useful to translate e.g. premium 900 or toll-free 800 numbers to actual routing numbers. If a Routing Number is defined, the called party number is implicitly replaced by the Routing Number and the call processing is continued with the latter.
An optional Start Date and End Date allows to schedule porting work-flows up-front by populating the LNP database with certain dates, and the entries are only going to become active with those dates. Empty values for start indicate a start date in the past, while empty values for end indicate an end time in the future during processing of a call, allowing to define infinite date ranges. As intervals can overlap, the LNP number record with a start time closest to the current time is selected.
In order to activate Local LNP during routing, the feature must be activated in config.yml. Set kamailio→proxy→lnp→enabled to yes and kamailio→proxy→lnp→type to local.
Calls to non-authoritative Carriers
When a call arrives at the system, the calling and called party numbers are first normalized using the Inbound Rewrite Rules for Caller and Inbound Rewrite Rules for Callee within the rewrite rule set assigned to the calling party (a local subscriber or a peer).
If the called party number is not assigned to a local subscriber, or if the called party is a local subscriber and has the subscriber/domain preference lnp_for_local_sub set, the LNP lookup logic is engaged, otherwise the call proceeds without LNP lookup. The further steps assume that LNP is engaged.
If the call originated from a peer, and the peer preference caller_lnp_lookup is set for this peer, then an LNP lookup is performed using the normalized calling party number. The purpose for that is solely to find the LNP prefix of the calling peer, which is then stored as source_lnp_prefix in the CDR. If the LNP lookup does not return a result (e.g. the calling party number is not populated in the local LNP database), but the peer preference default_lnp_prefix is set for the originating peer, then the value of this preference is stored in source_lnp_prefix of the CDR.
Next, an LNP lookup is performed using the normalized called party number. If no number is found (using a longest match), no further manipulation is performed.
If an LNP number entry is found, and the Routing Number is set, the called party number is replaced by the routing number. Also, if the Authoritative flag is set in the corresponding LNP Carrier, and the called party number is not assigned to a local subscriber, the call is rejected. This ensures that numbers allocated to the system but not assigned to subscribers are dropped instead of routed to a peer.
| |
If the system is serving a local subscriber with only the routing number assigned (but not e.g. the premium number mapping to this routing number), the subscriber will not be found and the call will either be rejected if the called party premium number is within an authoritative carrier, or the call will be routed to a peer. This is due to the fact that the subscriber lookup is performed with the dialled number, but not the routing number fetched during LNP. So make sure to assign e.g. the premium number to the local subscriber (optionally in addition to the routing number if necessary using alias numbers) and do not use the LNP routing number mechanism for number mapping to local subscribers. |
Next, if the the LNP carrier does not have the Skip Rewriting option set, the LNP Rewrite Rules for Callee are engaged. The rewrite rule set used is the one assigned to the originating peer or subscriber/domain via the rewrite_rule_set preference. The variables available in the match and replace part are, beside the standard variables for rewrite rules:
${callee_lnp_prefix}: The prefix stored in the LNP Carrier
${callee_lnp_basenumber}: The actual number entry causing the match (may be shorter than the called party number due to longest match)
Typically, you would create a rewrite rule to prefix the called party number with the callee_lnp_prefix by matching ^([0-9]+)$
and replacing it by ${callee_lnp_prefix}\1.
Once the LNP processing is completed, the system checks for further preferences to finalize the number manipulation. If the originating
local subscriber or peer has the preference lnp_add_npdi set, the Request URI user-part is suffixed with ;npdi. Next,
if the preference lnp_to_rn is set, the Request URI user-part is suffixed with ;rn=LNP_ROUTING_NUMBER, where
LNP_ROUTING_NUMBER is the Routing Number stored for the number entry in the LNP database, and the originally called number is
kept in place. For example, if lnp_to_rn is set and the number 1800123 is called, and this number has a routing number
1555123 in the LNP database, the resulting Request-URI is sip:1800123;rn=1555123@example.org.
Finally, the destination_lnp_prefix in the CDR table is populated either by the prefix defined in the Carrier of the LNP database if a match was found, or by the default_lnp_prefix prefrence of the destination peer or subscriber/domain.
The Sipwise NGCP provides means to allow or block calls towards ported numbers that are hosted by particular LNP carriers. Please visit Section 4.2.2.2, “Creating Rules per NCOS Level” in the handbook to learn how this can be achieved.
If a call originated from a peer and the peer preference force_outbound_calls_to_peer is set to force_nonlocal_lnp (the if callee is not local and is ported selection in the panel), the call is routed back to a peer selected via the peering rules.
This ensures that if a number once belonged to your system and is ported out, but other carriers are still sending calls to you (e.g. selecting you as an anchor network), the affected calls can be routed to the carrier the number got ported to.
The LNP database can be exported to CSV, and in the same format imported back to the system. On import, you can decide whether to drop existing data prior to applying the data from the CSV.
The CSV file format contains the fields in the following order:
carrier_name carrier_prefix number routing_number start end authoritative skip_rewrite
Table 2. LNP CSV Format
Name | Description |
Carrier Name | The Name in the LNP Carriers table (string, e.g. My Carrier) |
Carrier Prefix | The Prefix in the LNP Carriers table (string, e.g. DD55) |
Number | The Number in the LNP Numbers table (E164 number, e.g. 1800666) |
Routing Number | The Routing Number in the LNP Numbers table (E164 number or empty, e.g. 1555666) |
Start | The Start in the LNP Numbers table (YYYY-MM-DD or empty, e.g. 2016-01-01) |
End | The End in the LNP Numbers table (YYYY-MM-DD or empty, e.g. 2016-12-30) |
Authoritative | The Authoritative flag in the LNP Carriers table (0 or 1) |
Skip Rewrite | The Skip Rewrite flag in the LNP Carriers table (0 or 1) |
External LNP relies on the Sipwise LNP Daemon (lnpd) which kamailio-proxy is talking to via a defined JSONRPC protocol. The proxy sends the A and B number to lnpd, which in the current release translates it to a SIP Message sent to an external server (typically a Squire SIP-to-INAP gateway. This external gateway is performing an SS7 INAP request to fetch the LNP result, which is passed back as a binary blob in a 3xx response to the lnpd. The lnpd extracts the TCAP body of the response and returns the information back to the proxy.
In order to activate LNP lookup via API during call routing, the feature must be
activated in /etc/ngcp-config/config.yml. Set these parameters:
kamailio→proxy→lnp→enabled : yes
kamailio→proxy→lnp→type : api
lnpd→enabled : yes
There is a possibility to explicitly allow (whitelist) or deny (blacklist) certain
number ranges for which an LNP lookup may be done. The relevant configuration
parameters are at kamailio→proxy→lnp→lnp_request_whitelist
and kamailio→proxy→lnp→lnp_request_blacklist. For each entry in the list
a POSIX regex expression may be used, see the following example:
lnp:
lnp_request_whitelist:
- '^9'
- '^800'
lnp_request_blacklist:
- '^1'
- '^900'
- '^110'
- '^112'Interpretation of the above lists (that are based on numbers represented in national format):
| |
If both whitelist and blacklist are defined, the LNP lookup is only performed when the called number matches any of the whitelist patterns and does not match any of the blacklist patterns. |
It is possible to set up LNP daemon to provide a kind of redundant service to the Proxy. This means the LNP daemon will send its LNP query to more LNP serving nodes that are predefined in a list. (See Configuration of LNP daemon Section 4.4.2.3, “Configuration of Sipwise LNP Daemon” chapter for details.) The LNP query may happen in 2 ways:
LNP daemon takes its active configuration from /etc/ngcp-lnpd/config.yml file.
The file is generated automatically — when a new NGCP configuration is applied
(ngcpcfg apply…) — from the main Sipwise NGCP configuration file:
/etc/ngcp-config/config.yml and a template: /etc/ngcp-config/template/etc/ngcp-lnpd/config.yml.tt2.
System administrators are only expected to modify the lnpd.config section of
main configuration file /etc/ngcp-config/config.yml.
A sample LNP daemon configuration file (/etc/ngcp-lnpd/config.yml) looks like:
daemon:
json-rpc:
ports:
- 54321
- 12345
interfaces:
- 127.0.0.1
- 192.168.1.90
- ::1
sip:
port: 5095
address: 0.0.0.0
threads: 4
foreground: false
pidfile: /tmp/lnpd.pid
loglevel: 7
instances:
default:
module: sigtran
destination: 192.168.1.99
from-domain: test.example.com
headers:
- header: INAP-Service-Key
value: 2
reply:
tcap: raw-tcap
redundant:
module: sigtran
destinations:
- 192.168.1.99
- 192.168.1.95
- 192.168.1.90
mechanism: round-robin
retry-time: 30
timeout: 5
from-domain: test.example.com
headers:
- header: INAP-Service-Key
value: 2
reply:
tcap: raw-tcap
parallel:
module: sigtran
destinations:
- 192.168.1.99
- 192.168.1.95
- 192.168.1.90
mechanism: parallel
retry-time: 30
timeout: 10
from-domain: test.example.com
headers:
- header: INAP-Service-Key
value: 2
reply:
tcap: raw-tcap
mock1:
module: mock-tcap
numbers:
- number: '4311003'
routing-number: '4318881003'
reply:
tcap: raw-tcapThe corresponding NGCP main configuration file contains:
daemon:
foreground: 'false'
json-rpc:
ports:
- '54321'
- '12345'
loglevel: '7'
sip:
port: '5095'
threads: '4'
instances:
<< These are the same entries as in /etc/ngcp-lnpd/config.yml file >>Description of configuration parameters in /etc/ngcp-config/config.yml file
daemon section:
foreground: determines if the LNP daemon runs as foreground or background
process
json-rpc.ports: port numbers where LNP daemon listens for incoming JSONRPC
requests from NGCP Proxy
loglevel: how detailed information LNP daemon writes in its log file
sip.port: listening port number used for SIP sessions with LNP serving
nodes; LNP daemon will listen on first available (shared) IP address that is taken
from /etc/ngcp-config/network.yml file
threads: number of threads LNP daemon will use internally; this value determines
how many requests the daemon can serve in parallel
instances section: at least one default instance must be defined here.
Others are also useful for providing redundancy, please check redundant and
parallel entries above.
module: only sigtran is used for normal operations
| |
The module |
destinations: list of nodes to which LNP daemon sends the LNP query
mechanism: either parallel or round-robin, defining the method of redundant
queries
retry-time: a period of time in seconds while LNP daemon considers an LNP
serving node being unreachable after an LNP query timeout
timeout: the period of time while LNP daemon waits for a response on an LNP
query from one of the LNP serving nodes
PLEASE NOTE: retry-time and timeout are used with both the parallel and
the round-robin redundancy methods
from-domain: the domain that will be used in SIP From header when LNP
daemon sends the LNP query
headers: this is a list of header name — value pairs; these custom
headers will be included in SIP request that LNP daemon sends to an LNP serving node
reply.tcap: determines the format of reply sent to NGCP Proxy; currently
only raw-tcap is supported, which means LNP daemon will not decode the TCAP
response it gets from an LNP serving node but it forwards the raw TCAP message body
As opposed to the Simple Emergency Number Handling Section 3.6.5.1, “Simple Emergency Number Handling Overview” solution, the Sipwise NGCP supports an advanced emergency call handling method, called emergency mapping. The main idea is: instead of obtaining a statically assigned emergency prefix / suffix from subscriber preferences, NGCP retrieves an emergency routing prefix from a central emergency call routing table, according to the current location of the calling subscriber.
The following figure shows the overview of emergency call processing when using emergency mapping feature:
Emergency numbers per geographic location are mapped to different routing prefixes not deriveable from an area code or the emergency number itself. This is why a global emergency mapping table related to resellers is introduced, allowing to map emergency numbers to their geographically dependent routing numbers.
The geographic location is referenced by a location ID, which has to be populated by a north-bound provisioning system. No towns, areas or similar location data is stored on the NGCP platform. The locations are called Emergency Containers on NGCP.
The actual emergency number mapping is done per location (per Emergency Container), using the so-called Emergency Mapping entries. An Emergency Mapping entry assigns a routing prefix, valid only in a geographic area, to a generic emergency number (for example 112 in Europe, 911 in the U.S.A.) or a country specific one (for example 133).
| |
As of mr4.5 version, the NGCP performs an exact match on the emergency number in the emergency routing table. |
Emergency Containers may be assigned to various levels of the client hierarchy within NGCP. The following list shows such levels with each level overriding the settings of the previous one:
| |
Please be aware that Customer Location is not necessarily identical to the "location" identified through an Emergency Container. |
Once the emergency routing prefix has been retrieved from the emergency mapping table, call processing continues in the same way as in case of simple emergency call handling.
The administrative web panel of NGCP provides the configuration interface for emergency mapping. Please navigate to Settings → Emergency Mapping menu item first, in order to start configuring the mapping.
An Emergency Container must be created, before the mapping entries can be defined. Press Create Emergency Container to start this. An example of a container is shown here:
You have to select a Reseller that this container belongs to, and enter a Name
for the container, which is an arbitrary text.
| |
The platform administrator has to create as many containers as the number of different geographic areas (locations) the subscribers are expected to be in. |
As the second step of emergency mapping provisioning, the Emergency Mapping entries must be created. Press Create Emergency Mapping to start this step. An example is shown here:
The following parameters must be set:
Container: select an emergency mapping container (i.e. a location ID)
Code: the emergency number that subscribers will dial
Prefix: the routing prefix that belongs to the particular emergency service
within the selected location
Once all the necessary emergency mappings have been defined, the platform administrator will see a list of containers and mapping entries:
The emergency number mapping is now defined. As the next step, the platform administrator has to assign the emergency containers to Customers / Domains / Customer Locations or Subscribers. We’ll take an example with a Customer: select the customer, then navigate to Details → Preferences → Number Manipulations. In order to assign a container, press the Edit button and then select one container from the drop-down list:
Rewrite Rules for Emergency Mapping
Once emergency containers and emergency mapping entries are defined, the NGCP administrator has to ensure that the proper number manipulation takes place, before initiating any emergency call towards peers.
| |
Please don’t forget to define the rewrite rules for peers — particularly: Outbound Rewrite Rules for Callee — as described in Normalize Emergency Calls for Peers Section 3.6.5.3, “Normalize Emergency Calls for Peers” section of the handbook. |
There is a special case when the dialed number is recognized as an emergency number, but the emergency number is not available for the geographic area the calling party is located in.
In such a case the emergency mapping lookup will return an emergency prefix, but the
value of this will be NULL. Therefore the call is rejected and an announcement is
played. The announcement is a newly defined sound file referred as emergency_geo_unavailable.
It is possible to configure the rejection code and reason in /etc/ngcp-config/config.yml
file, the parameters are: kamailio.proxy.early_rejects.emergency_invalid.announce_code
and kamailio.proxy.early_rejects.emergency_invalid.announce_reason.
The Sipwise NGCP offers the possibility to upload / download emergency mapping entries in form of CSV files. This operation is available for each reseller, and is very useful if a reseller has many mapping entries.
Downloading Emergency Mapping List
One has to navigate to Settings → Emergency Mapping menu and then press the Download CSV button to get the list of mapping entries in a CSV file. First the reseller must be selected, then the Download button must be pressed. As an example, the entries shown in "Emergency Mapping List" picture above would be written in the file like here below:
EmergCont_1,133,E1_133_ EmergCont_1,144,E1_144_ EmergCont_2,133,E2_133_
The CSV file has a plain text format, each line representing a mapping entry, and contains the following fields:
Uploading Emergency Mapping List
Uploading a CSV file with emergency mapping entries may be started after pressing the Upload CSV button. The following data must be provided:
Reseller: selected from the list
Upload mapping: the CSV file must be selected after pressing the Choose File button
Purge existing: an option to purge existing emergency mapping entries that belong
to the selected reseller, before populating the new mapping data from the file
The CSV file for the upload has the same format as the one used for download.
Adding additional SIP headers to the initial INVITEs relayed to the callee (second leg) is possible by modifying the following template file: /etc/ngcp-config/templates/etc/ngcp-sems/etc/ngcp.sbcprofile.conf.customtt.tt2. The following section can be changed:
header_filter=whitelist header_list=[%IF kamailio.proxy.debug == "yes"%]P-NGCP-CFGTEST,[%END%] P-R-Uri,P-D-Uri,P-Preferred-Identity,P-Asserted-Identity,Diversion,Privacy, Allow,Supported,Require,RAck,RSeq,Rseq,User-Agent,History-Info,Call-Info [%IF kamailio.proxy.presence.enable == "yes"%],Event,Expires, Subscription-State,Accept[%END%][%IF kamailio.proxy.allow_refer_method == "yes"%],Referred-By,Refer-To,Replaces[%END%]
By default the system will remove from the second leg all the SIP headers which are not in the above list. If you want to keep some additional/custom SIP headers, coming from the first leg, into the second leg you just need to add them at the end of the header_list= list. After that, as usual, you need to apply and push the changes. In this way the system will keep your headers in the INVITE sent to the destination subscriber/peer.
![[Warning]](images/icons/warning.png){kind=icon} | |
DO NOT TOUCH the list if you don’t know what you are doing. |
Sometimes you may need to filter some audio CODEC from the SDP payload, for example if you want to force your subscribers to do not talk a certain codecs or force them to talk a particular one.
To achieve that you just need to change the /etc/ngcp-config/config.yml, in the following section:
sdp_filter:
codecs: PCMA,PCMU,telephone-event
enable: yes
mode: whitelistIn the example above, the system is removing all the audio CODECS from the initial INVITE except G711 alaw,ulaw and telephone-event. In this way the callee will be notified that the caller is able to talk only PCMA. Another example is the blacklist mode:
sdp_filter:
codecs: G729,G722
enable: yes
mode: blacklistIn this way the G729 and G722 will be removed from the SDP payload.
In order to apply the changes, as usual, you need to run ngcpcfg apply Enable CODEC filtering and push the changes .
It may be useful and mandatory - specially with NGN interconnection - to enable SIP History header and/or Diversion header for outbound requests to a peer or even for on-net calls. In order to do so, you should enable the following preferences in Domain’s and Peer’s Preferences:
For the purpose of external SIP-PBX interconnect with sip:carrier the platform admin should create a subscriber with multiple aliases representing the numbers and number ranges served by the SIP-PBX.
To configure the Subscriber, go to Settings→Subscribers and click Details on the row of your subscriber. There, click on the Preferences button on top.
You should look into the Number Manipulations and Access Restrictions sections in particular, which control the calling and called number presentation.
Enable preference Number Manipulations→e164_to_ruri for routing inbound calls to SIP-PBX. This ensures that the Request-URI will comprise a SIP-URI containing the dialed alias-number as user-part, instead of the user-part of the registered AOR (which is normally a static value).
The following sections describe the recommended configuration for correct call routing and CLI presentation according to the SIPconnect 1.1 recommendation.
The SIP PBX by default inherits the domain dialplan which usually has rewrite rules applied to normal Class 5 subscribers with inbound rewrite rules normalizing the dialed number to the E.164 standard. If most users of this domain are Class 5 subscribers the dialplan may supply calling number in national format - see Section 3.6, “Configuring Rewrite Rule Sets”. While the SIP-PBX trunk configuration can be sometimes amended it is a good idea in sense of SIPconnect recommendation to send only the global E.164 numbers.
Moreover, in mixed environments with the sip:carrier Cloud PBX sharing the same domain with SIP trunking (SIP-PBX) customers the subscribers may have different rewrite rules sets assigned to them. The difference is caused by the fact that the dialplan for Cloud PBX is fundamentally different from the dialplan for SIP trunks due to extension dialing, where the Cloud PBX subscribers use the break-out code (see Section 14.1.2, “Preparing PBX Rewrite Rules”) to dial numbers outside of this PBX.
The SIPconnect compliant numbering plan can be accommodated by assigning Rewrite Rules Set to the SIP-PBX subscriber. Below is a sample Rewrite Rule Set for using the global E.164 numbers with plus required for the calling and called number format compliant to the recommendation.
Inbound Rewrite Rule for Caller
^(00|\+)([1-9][0-9]+)$
\2
International to E.164
Inbound
Caller
Inbound Rewrite Rule for Callee
^(00|\+)([1-9][0-9]+)$
\2
International to E.164
Inbound
Callee
Outbound Rewrite Rule for Caller
^([1-9][0-9]+)$
+\1
For the calls to SIP-PBX add plus to E.164
Outbound
Caller
Outbound Rewrite Rule for Callee
^([1-9][0-9]+)$
+\1
For the calls to SIP-PBX add plus to E.164
Outbound
Callee
Assign the aforementioned Rewrite Rule Set to the SIP-PBX subscribers.
| |
Outbound Rewrite Rules for Callee shall NOT be applied to the calls to normal SIP UAs like IP phones since the number with plus does not correspond to their SIP username. |
The following configuration is needed for your platform to populate the From and To headers and Request-URI of the INVITE request with "user=phone" parameter as per RFC 3261 Section 19.1.1 (if the user part of the URI contains telephone number formatted as a telephone-subscriber).
The following is our common configuration that covers the calling number presentation in a variety of use-cases, including the incoming calls, on-net calls and Call Forward by the platform:
The above parameters can be tuned to operator specifics as required. You can of course override these settings in the Subscriber Preferences if particular subscribers need special settings.
| |
On outgoing call from SIP-PBX subscriber the Network-Provided Number (NPN) is set to the cli preference prefilled with main E.164 number. In order to have the full alias number as NPN on outgoing call set preference extension_in_npn = Y. |
Externally forwarded call. If the call forward takes place inside the SIP-PBX it can use one of the following specification for signaling the diversion number to the platform:
SIP-PBX can use either Static or Registration Mode. While SIPconnect 1.1 continues to require TLS support at MUST strength, one should note that using TLS for signaling does not require the use of the SIPS URI scheme. SIPS URI scheme is obsolete for this purpose.
Static Mode. While SIPconnect 1.1 allows the use of Static mode, this poses additional maintenance overhead on the operator. The administrator should create a static registration for the SIP-PBX: go to Susbcribers, Details→Registered Devices→Create Permanent Registration and put address of the SIP-PBX in the following format: sip:username@ipaddress:5060 where username=username portion of SIP URI and ipaddress = IP address of the device.
Registration Mode. It is recommended to use the Registration mode with SIP credentials defined for the SIP-PBX subscriber.
| |
The use of RFC 6140 style "bulk number registration" is discouraged. The SIP-PBX should register one AOR with email-style SIP URI. The sip:carrier will take care of routing the aliases to the AOR with e164_to_ruri preference. |
If a SIP-PBX cannot perform the digest authentication, you can authenticate it by its source IP address in sip:carrier. To configure the IP-based authentication, go to the subscriber’s preferences (Details→ Preferences→Trusted Sources) and specify the IP address of the SIP-PBX in the Source IP field.
To authenticate multiple subscribers from the same IP address, use theFrom field to distinguish these subscribers.
When this feature is configured for a subscriber, the sip:carrier authenticates all calls that arrive from the specified IP address without challenging them.
| |
If the same IP address and the FROM field are mistakenly specified as trusted for different subscribers, the sip:carrier will not know which subscriber to charge for the call and will randomly select one. |
In some cases, when you have a device that cannot authenticate itself against sip:carrier, you may need to create a Trusted Subscriber. Trusted Subscribers use IP-based authentication and they have a Permanent SIP Registration URI in order to receive messages from sip:carrier.
In order to make a regular subscriber trusted, perform the following extra steps: * Create a permanent registration via (Subscribers→Details→ Registered Devices→Create Permanent Registration) * Add the IP address of the device as Trusted Source in your subscriber’s preferences (Details→Preferences→Trusted Sources).
This way, all SIP messages coming from the device IP will be considered trusted (and get authenticated just by the source IP). All the SIP messages forwarded to the devices will be sent to the SIP URI specified in the subscriber’s permanent registration.
There is a Fax Server included in the sip:carrier. The following sections describe its architecture.
The Fax Server is included on the platform and requires no additional hardware. It supports both T38 and G711 codecs and provides a cost-effective paper-free office solution.
For the details of Fax Server configuration options, please see Faxserver Configuration Appendix C, NGCP-Faxserver Configuration chapter in this handbook.
To receive faxes via email, a phone call from a sender is connected to the fax application module (Asterisk + NGCP Fax Server) on the sip:carrier. The received fax document is converted to the format the receiver has configured (either PS, PDF or TIFF) via the components outlined in the figure below. The email is delivered to one or more configured addresses.
To send faxes via the sip:carrier a sender can use any email client or an interface such as Webfax or REST API.
Currently, supported formats are TXT, PS, TIFF and PDF.
The document is sent to the NGCP Fax Server instance on the sip:carrier. Once successfully queued by the fax server, it is converted to an internal TIFF format and is sent via the components outlined in the below figure to the specified phone number. Of course, a fax device that can receive the document must be connected on the destination side.
For a subscriber to manage his voicebox via IVR, there are two ways to access the voicebox. One is to call the URI voicebox@yourdomain from the subscriber itself, allowing password-less access to the IVR, as the authentication is already done on SIP level. The second is to call the URI voiceboxpass@yourdomain from any number, causing the system to prompt for a mailbox and the PIN. The PIN can be set in the Voicemail and Voicebox section of the Subscriber Preferences.
Since access might need to be provided from external networks like PSTN/Mobile, and since certain SIP phones do not support calling alphanumeric numbers to dial voicebox, you can map any number to the voicebox URIs using rewrite rules.
To do so, you can provision a match pattern e.g. ^(00|\+)12345$ with a replace pattern voicebox or voiceboxpass to map a number to either password-less or password-based IVR access respectively. Create a new rewrite rule with the Inbound direction and the Callee field in the corresponging rewrite rule set.
For inbound calls from external networks, assign this rewrite rule set to the corresponding incoming peer. If you also need to map numbers for on-net calls, assign the rewrite rule set to subscribers or the whole SIP domain.
When reaching voiceboxpass, the subscriber is prompted for her mailbox number and a password. All numbers assigned to a subscriber are valid input (primary number and any alias number). By default, the required format is in E.164, so the subscriber needs to enter the full number including country code, for example 4912345 if she got assigned a German number.
You can globally configure a rewrite rule in config.yml using asterisk.voicemail.normalize_match and asterisk.voicemail.normalize_replace, allowing you to customize the format a subscriber can enter, e.g. having ^0([1-9][0-9]+)$ as match part and 49$1 as replace part to accept German national format.
The following list shows you how the voicebox menu is structured.
1 Read voicemail messages
3 Advanced options
9 Save message in a folder
2 Change folders
3 Advanced Options
0 Mailbox options
1 Record your unavailable message
2 Record your busy message
3 Record your name
4 Record your temporary greetings
A message/greeting is a short message that plays before the caller is allowed to record a message. The message is intended to let the caller know that you are not able to answer their call. It can also be used to convey other information like when you will be available, other methods to contact you, or other options that the caller can use to receive assistance.
The IVR menu has three types of greetings.
The standard voice mail greeting is the "unavailable" greeting. This is used if you don’t answer the phone and so the call is directed to your voice mailbox.
Recorded name is unavailable."
Digits-of-number-dialed is unavailable".
If you wish, you can record a custom greeting used when someone calls you and you are currently on the phone. This is called your "Busy" greeting.
Recorded name is busy."
Digits-of-number-dialed is busy."
You can also record a temporary greeting. If it exists, a temporary greeting will always be played instead of your "busy" or "unavailable" greetings. This could be used, for example, if you are going on vacation or will be out of the office for a while and want to inform people not to expect a return call anytime soon. Using a temporary greeting avoids having to change your normal unavailable greeting when you leave and when you come back.
The Voicemail system allows you to save and organize your messages into folders. There can be up to ten folders.
When a caller leaves a message for you,the system will put the message into the "New Messages" folder. If you listen to the message, but do not delete the message or save the message to a different folder, it will automatically move the message to the "Old Messages" folder. When you first log into your mailbox, the Voicemail System will make the "New Messages" folder the current folder if you have any new messages. If you do not have any new messages the it will make the "Old Messages" folder the current folder.
This section shows flowcharts of calls to the voicemail system. Flowcharts contain the name of prompts as they are identified among Asterisk voice prompts.
The language for the Voicemail system IVR or Vertical Service Codes (VSC) IVRs may be set using the subscriber or domain preference language.
The sip:carrier provides the pre-installed prompts for the Voicemail in the English, Spanish, French and Italian languages and the pre-installed prompts for the Vertical Service Codes IVRs in English only.
The other IVRs such as the Conference system and the error announcements use the Sound Sets configured in NGCP Panel and uploaded by the administrator in his language of choice.
The sip:carrier provides the administrator with ability to upload the voice prompts such as conference prompts or call error announcements on the Sound Sets page. There is a preference sound_set in the NAT and Media Flow Control section on Domain and Subscriber levels to link subscribers to the sound set that they should hear (as usual the subscriber preference overrides the domain one). Sound Sets can be defined in Settings→Sound Sets. To create a new Sound Set, click Create Sound Set. Then click the Files button.
| |
You may use 8 or 16 bit mono WAV audio files for all of the voice prompts. |
The call error announcements are grouped under Early Rejects section. Unfold the section and click Upload next to the sound handles (Names) that you want to use. Choose a WAV file from your file system, and click the Loopplay setting if you want to play the file in a loop instead of just once. Click Save to upload the file.
The call error announcements are played to the user in early media hence the name "Early Reject". If you don’t provide the sound files for any handles they will not be used and the sip:carrier will fallback to sending the error response code back to the user.
The exact error status code and text are configurable in the /etc/ngcp-config/config.yml
file, in kamailio.proxy.early_rejects section. Please look for the announcement
handle listed in below table in order to find it in the configuration file.
Table 3. Early Reject Announcements
| Handle | Description | Message played |
|---|---|---|
| This is an announcement that the calling party hears before
the call is being forwarded (Unconditional and Not Available cases) to the destination.
The feature can be activated with Applications / | N/A (custom message, no default) |
| This is what the calling party hears when a call is made from a number that is blocked by the incoming block list (adm_block_in_list, block_in_list customer/subscriber preferences) | Your call is blocked by the number you are trying to reach. |
| This is what the calling party hears when a call is made to a number that is blocked by the outgoing block list (adm_block_out_list, block_out_list customer/subscriber preferences) | Your call to the number you are trying to reach is blocked. |
| This is what the calling party hears when a call is made to a number that is blocked by the NCOS level assigned to the subscriber or domain (the NCOS level chosen in ncos and adm_ncos preferences). PLEASE NOTE: It is not possible to configure the status code and text. | Your call to the number you are trying to reach is not permitted. |
| Announcement played to calling party if it used wrong PIN code to override the outgoing user block list or the NCOS level for this call (the PIN set by block_out_override_pin and adm_block_out_override_pin preferences) | The PIN code you have entered is not correct. |
| Announcement played on incoming call to the subscriber which is currently busy (486 response from the UAS) | The number you are trying to reach is currently busy. Please try again later. |
| Announcement played on incoming call to the subscriber which is currently not registered | The number you are trying to reach is currently not available. Please try again later. |
| Announcement played on incoming call to the subscriber which is currently unavailable (408, other 4xx or no response code or 30x with malformed contact) | The number you are trying to reach is currently not available. Please try again later. |
| Announcement that is played on call to unknown or invalid number (not associated with any of our subscribers/hunt groups) | The number you are trying to reach is not in use. |
| Announcement played when the called subscriber has the call forwarding configured to itself | The number you are trying to reach is forwarded to an invalid destination. |
| Announcement played when emergency destination is dialed
but the destination is not provisioned for the location of the user. PLEASE NOTE:
The configuration entry for this case in | The emergency number you have dialed is not available in your region. |
| Announcement played when emergency destination is dialed but the emergency calls are administratively prohibited for this user or domain (reject_emergency preference is enabled) | You are not allowed to place emergency calls from this line. Please use a different phone. |
| Announcement played when the call is handled by 3rd party
call control (PCC) and there was an error during call processing. PLEASE NOTE:
This announcement may be configured in the sound set in | An error has occured. Please try again later. |
| This is what the calling party hears when it calls an empty speed-dial slot | The speed dial slot you are trying to use is not available. |
| Announcement played on incoming call to a subscriber that is locked for incoming calls | The number you are trying to reach is currently not permitted to receive calls. |
| Announcement played on outgoing call to subscriber that is locked for outgoing calls | You are currently not allowed to place outbound calls. |
| Announcement played on incoming call to a subscriber who has exceeded the concurrent_max limit by sum of incoming and outgoing calls or whose customer has exceeded the concurrent_max_per_account limit by sum of incoming and outgoing calls | The number you are trying to reach is currently busy. Please try again later. |
| Announcement played on outgoing call to a subscriber who has exceeded the concurrent_max (total limit) or concurrent_max_out (limit on number of outbound calls) or whose customer has exceeded the concurrent_max_per_account or concurrent_max_out_per_account limit | All outgoing lines are currently in use. Please try again later. |
| Announcement played on calls from the peering if that peer has
reached the maximum number of concurrent calls (configured by admin in concurrent_max
preference of peering server). PLEASE NOTE: There is no configuration option of
the status code and text in | The network you are trying to reach is currently busy. Please try again later. |
| Announcement played when prepaid account has insufficient balance to make a call to this destination | You don’t have sufficient credit balance for the number you are trying to reach. |
| Announcement played in case of outgoing off-net call when there is no peering rule matching this destination and/or source | The network you are trying to reach is not available. |
| When the VSC (Vertical Service Code) service is disabled in domain or
subscriber preferences (Access Restrictions / | N/A (custom message, no default) |
| Announcement played on inbound call from trusted IP (e.g. external PBX) with non-local Request-URI domain | The network you are trying to reach is not available. |
| This is what the calling party hears when it tries to make a call from unauthorized IP address or network (allowed_ips, man_allowed_ips preferences) | You are not allowed to place calls from your current network location. |
| PLEASE NOTE: This announcement is already obsolete, as of NGCP version mr5.3 | The voicemail of the number you are trying to reach is currently not available. Please try again later. |
There are some early reject scenarios when either no voice announcement is played,
or a fixed announcement is played. In either case a SIP error status message is
sent from NGCP to the calling party. It is possible to configure the exact status
code and text for such cases in the /etc/ngcp-config/config.yml file, in
kamailio.proxy.early_rejects section. The below table gives an overview of those
early reject cases.
Table 4. Additional Early Reject Reason Codes
| Handle | Description |
|---|---|
| Caller blocked by |
| Callee blocked by subscriber preference |
| Caller blocked by subscriber preference |
| Caller blocked by customer preference |
| Callee is a PBX group with 0 members. Announcement
|
| Callee is a PBX group and we have a timeout (i.e. no
group member could be reached). Announcement |
| PLEASE NOTE: This handle refers to the same early reject
case as |
The sip:carrier provides the simple pin-protected conferencing service built using the SEMS DSM scripting language. Hence it is open for all kinds of modifications and extensions.
Template files for the sems conference scripts stored in /etc/ngcp-config/templates/etc/ngcp-sems/:
Go to your Subscriber Preferences and click Edit on the Call Forward Type you want to set (e.g. Call Forward Unconditional).
You should select Conference option in the Destination field and leave the URI/Number empty. The timeout defines for how long this destination should be tried to ring.
Sound Sets can be defined in Settings→Sound Sets. To create a new Sound Set, click Create Sound Set. Then click the Files button.
Upload the following files:
Table 5. Conference Sound Sets
| Handle | Message played |
|---|---|
conference_greeting | Welcome to the conferencing service. |
conference_pin | Please enter your PIN, followed by the pound key. |
conference_pin_wrong | You have entered an invalid PIN number. Please try again. |
conference_joined | You will be placed into the conference. |
conference_first | You are the first person in the conference. |
conference_join | A person has joined the conference. |
conference_leave | A person has left the conference. |
conference_max_participants | All conference lines are currently in use. Please try again later. |
conference_waiting_music | …waiting music… |
goodbye | Goodbye. |
| |
You may use 8 or 16 bit mono WAV audio files. |
Then set the preference sound_set on the Domain or Subscriber level in order to assign the Sound Set you have just created to the subscriber (as usual the subscriber preference overrides the domain one).
There are 2 ways of joining a conference: with or without PIN code. The actual way of joining the conference depends on Subscriber settings. A subscriber who has activated the conference through call forwarding may set a PIN in order to protect the conference from unauthorized access. To activate the PIN one has to enter a value in Subscriber → Details → Preferences → Internals → conference_pin field.
In case the PIN protection for the conference is activated, when someone calls the subscriber who has enabled the conference, the caller is prompted to enter the PIN of the conference. Upon the successful entry of the PIN the caller hears the announcement that he is going to be placed into the conference and at the same time this is announced to all participants already in the conference.
The following 2 sections show flowcharts with voice prompts that are played to a caller when he dials the conference.
MCID feature allows customers to report unwanted calls to the platform operator.
To enable the feature first edit config.yml and enable there apps: malicious_call: yes and kamailio: store_recentcalls: yes. The latter option enables kamailio to store recent calls per subscrbriber UUID in the redis DB (the amount of stored recent calls will not exceed the amount of provisionined subscribers).
Next step is to create a system sound set for the feature. In Settings→Sound Sets either use your already existing Sound Set or create a new Sound Set and then assign it to your domain or subscribers. In the Sound Set there is a fileset malicious_call_identification→mailicious_call_report for that purpose.
Once the Sound Set is created the Subscriber’s Preferences Malicious Call Identification must be enabled under Subcriber → Preferences → Applications menu. The same parameter can be set in the Customer’s preferences to enable this feature for all its subscribers.
The final step is to create a new Rewrite Rule and to route calls to, for instance *123 → MCID application. For that you create a Calee Inbound rewrite rule ^(\*123)$ → malicious_call
Finaly you run ngcpcfg apply Enabling MCID to recreate the templates and automatically restart depended services.
As a subscriber, to report a malicious call you call to either malicious_call or to your custom number assigned for that purpose. Please note that you can report only your last received call. You will hear the media reply from the Sound Set you have previosuly configured.
To check reported malicious calls as the plafrom operator open Settings→Malicious Calls tab where you will see a list of registered calls. You can selectively delete records from the list and alternatively you can manage the reported calls by using the REST API.
By default the expiration time for the most recent call per subscriber is 3600 seconds (1 hour). If you wish to prolong or shorten the expiration time open constants.yml and set there recentcalls: expire: 3600 to a new value, and issue ngcpcfg apply Enabling MCID afterwards.
The preferences a subscriber can provision by himself via the CSC can be limited via profiles within profile sets assigned to subscribers.
Profile sets define containers for profiles. The idea is to define profile sets with different profiles by the administrator (or the reseller, if he is permitted to do so). Then, a subscriber with administrative privileges can re-assign profiles within his profile sets for the subscribers of his customer account.
Profile Sets can be defined in Settings→Subscriber Profiles. To create a new Profile Set, click Create Subscriber Profile Set.
You need to provide a reseller, name and description.
To create Profiles within a Profile Set, hover over the Profile Set and click the Profiles button.
Profiles within a Profile Set can be created by clicking the Create Subscriber Profile button.
Checking the Default Profile option causes this profile to get assigned automatically to all subscribers, who have the profile set assigned. Other options define the user preferences which should be made available to the subscriber.
| |
When the platform administrator selects Preferences of the Subscriber Profile he will get an empty page like in the picture below, if none or only certain options are selected in the Subscriber Profile. |
Some of the options, like ncos (NCOS level), will enable the definition of
that preference within the Subscriber Profile Preferences. Thus all subscribers
who have this profile assigned to will have the preference activated by default.
The below picture shows the preferences linked to the sample Subscriber Profile:
In order to detect a SIP loop ( incoming call as a response for a call request ) sip:carrier checks the combination of SIP-URI, To and From headers.
This check can be enabled in config.yml by setting kamailio.proxy.loop_detection.enable: 'yes'. The system tolerates kamailio.proxy.loop_detection.max loops within kamailio.proxy.loop_detection.expire seconds. Higher occurrence of loops will be reported with a SIP 482 "Loop Detected" error message
Call-through allows telephony client to dial into an IVR system and specify (in two-stage dialing fashion) a new destination number which is then dialed by the sip:carrier to connect the client to the destination. As the call-through system needs to be protected from unauthorized use, a list of CLIs which are allowed to use the call-through system is stored in the sip:carrier platform.
Table 6. Call-Through Mappings
| Column | Description |
|---|---|
uuid | The internal UUID of the call-through subscriber |
auth_key | Authentication key (CLI) |
source_uuid | The internal UUID of the subscriber that is authorized for outgoing call leg (same as uuid in call-through scenario) |
In order to manage the call-through CLIs for subscriber, navigate to Settings→Subscribers, search for the subscriber you want to edit, press Details and then Preferences, scroll down to the Callthrough CLIs section and press Edit Callthrough CLIs button.
Using the NGCP Panel the user then creates Call Forward to destination Call Through.
If the subscriber has a Call Forward to the call-through application but caller’s CLI is not in the authorized CLIs list for call-through, sems responds with error back to proxy and proxy advances to the next number in the Call Forward destinations set. User can enter special destination Local Subscriber as next target after Call Through in the destinations set in order to terminate the call to the subscriber as if the subscriber didn’t exist. This way the user may reach the call-through application from his authorized CLI (e.g. mobile number) and all other callers would reach the SIP subscriber’s registered phone as usual.
In order for the Callthrough application to work a Sound Set must be created and associated with the Domain or Subscriber.
Sound Sets can be defined in Settings→Sound Sets. To create a new Sound Set, click Create Sound Set. Then click the Files button. Administrator can upload the default sounds in one of supported languages or uploaded by the administrator manually in his language of choice.
There is a preference sound_set on Domain and Subscriber levels to link subscribers to the sound set that they should hear (as usual the subscriber preference overrides the domain one).
| |
You may use 8 or 16 bit mono WAV audio files for all of the voice prompts. |
The call arrives at sems application server with Request-URI user callthrough.
The INVITE contains an extra SIP header P-App-Param with the following parameters:
Table 7. SIP Header parameters for call-through application
| Name | Meaning |
|---|---|
uuid | The internal UUID of the call-through subscriber |
srcnumber | Caller’s CLI for the authentication |
outgoing_cli | New CLI to be used by sems application for the outgoing call leg |
Caller is authorized using mapping shown in table above:
select source_uuid from provisioning.voip_cc_mapping where uuid=$uuid and auth_key=$srcnumber;
If the check fails return the configured error response code. Then proceed with the call setup as follows.
Sems requests the user to enter destination and starts digit collection. Digit collection process is terminated after 5 seconds (configurable in sems config file) or by pressing the # key. User can start entering destination while the voice prompt is being played.
Sems sends INVITE to the proxy with Request-URI: sip:$number@$outboundproxy;sw_domain=$subscriber.domain
From: $outgoing_cli
On receiving the 401 or 407 response from the proxy the application authenticates using the digest credentials retrieved for the call-through subscriber from the voip_subscribers table:select s.username, s.password, d.domain from provisioning.voip_subscribers s, provisioning.voip_domains d where s.uuid=$source_uuid and s.domain_id=d.id;
If the call setup fails the application plays back the "could_not_connect" sound file. If successful the application acts transparently and does not provide any voice announcements or DTMF detection.
Calling card application uses a similar concept to call-through except that authorization process operates on the PIN code entered by user using DTMF instead of the CLI. The sip:carrier maps incoming UUID of the pilot subscriber to the list of PINs for calling card application with their corresponding subscriber UUIDs for outbound call leg using table provisioning.voip_cc_mapping table {"uuid", "auth_key", "source_uuid"}
Table 8. Calling Cards
| Column | Description |
|---|---|
uuid | The internal UUID of the pilot subscriber |
auth_key | Authentication key (PIN) |
source_uuid | The internal UUID of the subscriber that is authorized for outgoing call leg |
In order to use the calling cards service the user creates a Call Forward to destination Calling Card for the designated subscriber that will be used as access number for this service.
In order for the Calling Card application to work a Sound Set must be created and associated with the Domain or Subscriber.
Sound Sets can be defined in Settings→Sound Sets. To create a new Sound Set, click Create Sound Set. Then click the Files button. Administrator can upload the default sounds in one of supported languages or uploaded by the administrator manually in his language of choice.
There is a preference sound_set on Domain and Subscriber levels to link subscribers to the sound set that they should hear (as usual the subscriber preference overrides the domain one).
| |
You may use 8 or 16 bit mono WAV audio files for all of the voice prompts. |
The CLI on the outgoing call from the calling card app can be configured in one of the following ways using subscriber preferences:
1) Show original caller’s CLI: the calling card subscriber shall have allowed_clis: * (any). Sems application sends the original caller’s CLI in the From header, it is validated by the SIP proxy and sent to outside.
2) Show number of the pilot (calling card) subscriber: the calling card subscriber shall have an empty allowed_clis and desired number set as value of user_cli preference. The SIP proxy overrides the original caller’s CLI in UPN with the value of the user_cli preference. The peer must have set outbound_from_user, outbound_from_display: User-Provided Number (UPN).
The call arrives at sems application server with Request-URI user callingcard.
The INVITE contains an extra SIP header P-App-Param with the following parameters:
Table 9. SIP Header parameters for calling card application
| Name | Meaning |
|---|---|
uuid | The internal UUID of the pilot subscriber |
outgoing_cli | New CLI to be used by sems application for the outgoing call leg |
select source_uuid from provisioning.voip_cc_mapping where uuid=$uuid and auth_key=$pin;
source_uuid key as follows.
Sems application plays back the available balance of the customer. Sems requests the user to enter destination and starts digit collection. Digit collection process is terminated after 5 seconds (configurable in sems config file) or by pressing the # key. User can start entering destination while the voice prompt is being played.
Sems sends INVITE to the proxy with Request-URI: sip:$number@$outboundproxy;sw_domain=$subscriber.domain
From: $outgoing_cli
On receiving the 401 or 407 response from the proxy the application authenticates using the digest credentials retrieved for the subscriber for outgoing call leg from the voip_subscribers table:
select s.username, s.password, d.domain from provisioning.voip_subscribers s, provisioning.voip_domains d where s.uuid=$source_uuid and s.domain_id=d.id;
During the destination collection phase in calling card application user can enter special code *1*<pin># (configurable in sems config file) to transfer balance from other calling card customer to the currently authorized customer. Sems transfers all remaining balance from that customer to the current customer.
The call via calling card application as well as call-through generates three CDRs:
Content and vision of the invoices are customizable by invoice templates Section 4.19.2, “Invoice Templates”.
| |
The sip:carrier generates invoices in pdf format. |
Invoices can be requested for generation, searched, downloaded and deleted in the invoices interface.
To request invoice generation for the particular customer and period press "Create invoice" button. On the invoice creation form following parameters are available for selection:
All form fields are mandatory.
Generated invoice can be downloaded as pdf file.
To do it press button "Download" against invoice in the invoice management interface.
Respectively press on the button "Delete" to delete invoice.
Invoice template defines structure and look of the generated invoices. The sip:carrier makes it possible to create some invoice templates. Multiple invoice templates can be used to send invoices to the different customers using different languages.
| |
At least one invoice template should be created to enable invoice generation. Each customer has to be associated to one of the existent invoice template, otherwise invoices will be not generated for this customer. |
Customer can be linked to the invoice template in the customer interface.
Invoice templates can be searched, created, edited and deleted in the invoice templates management interface.
Invoice template creation is separated on two steps:
To register new invoice template press "Create Invoice Template" button.
On the invoice template meta information form following parameters can be specified:
All form fields are mandatory.
After registering new invoice template you can change invoice template structure in WYSIWYG SVG editor and preview result of the invoice generation based on the template.
Invoice template is a XML SVG source, which describes content, look and position of the text lines, images or other invoice template elements. The sip:carrier provides embedded WYSIWYG SVG editor svg-edit 2.6 to customize default template. The sip:carrier svg-edit has some changes in layers management, image edit, user interface, but this basic introduction still may be useful.
Template refers to the owner reseller contact ("rescontact"), customer contract ("customer"), customer contact ("custcontact"), billing profile ("billprof"), invoice ("invoice") data as variables in the "[%%]" mark-up with detailed information accessed as field name after point e.g. [%invoice.serial%]. During invoice generation all variables or other special tokens in the "[% %]" mark-ups will be replaced by their database values.
Press on "Show variables" button on invoice template content page to see full list of variables with the fields:
You can add/change/remove embedded variables references directly in main svg-edit window. To edit text line in svg-edit main window double click on the text and place cursor on desired position in the text.
After implementation of the desired template changes, invoice template should be saved Section 4.19.2.3, “Save and preview invoice template content”.
To return to the sip:carrier invoice template default content you can press on the "Discard changes" button.
| |
"Discard changes" operation can’t be undone. |
Layers
Default template contains three groups elements (<g/>), which can be thinked of as pages, or in terms of svg-edit - layers. Layers are:
To see all invoice template layers, press on "Layers" vertical sign on right side of the svg-edit interface:
Side panel with layers list will be shown.
One of the layers is active, and its element can be edited in the main svg-edit window. Currently active layer’s name is bold in the layers list. The layers may be visible or invisible. Visible layers have "eye" icon left of their names in the layers list.
To make a layer active, click on its name in the layers list. If the layer was invisible, its elements became visible on activation. Thus you can see mixed elements of some layers, then you can switch off visibility of other layers by click on their "eye" icons. It is good idea to keep visibility of the "Background" layer on, so look of the generated page will be seen.
Sometimes it may be convenient to edit svg source directly and svg-edit makes it possible to do it. After press on the <svg> icon in the top left corner of the svg-edit interface:
SVG XML source of the invoice template will be shown.
SVG source can be edited in place or just copy-pasted as usual text.
| |
Template keeps sizes and distances in pixels. |
| |
When edit svg xml source, please change very carefully and thinkfully things inside special comment mark-up "<!--{ }-→". Otherwise invoice generation may be broken. Please be sure that document structure repeats default invoice template: has the same groups (<g/>) elements on the top level, text inside special comments mark-up "<!--{ }-→" preserved or changed appropriately, svg xml structure is correct. |
To save your changes in the svg xml source, first press "OK" button on the top left corner of the source page:
And then save invoice template changes Section 4.19.2.3, “Save and preview invoice template content”.
| |
You can copy and keep the svg source of your template as a file on the disk before start experimenting with the template. Later you will be able to return to this version replacing svg source. |
Change logo image
After image uploaded save invoice template changes Section 4.19.2.3, “Save and preview invoice template content”.
To save invoice template content changes press button "Save SVG".
You will see message about successfully saved template. You can preview your invoice look in PDF format. Press on "Preview as PDF" button.
Invoice preview will be opened in the new window.
| |
Example fake data will be used for preview generation. |
Besides generating invoices on demand using web interface, Sipwise NGCP contains an invoice generator script that allows for producing invoices automatically, at regular intervals, for all customers, using the cron system tool.
| |
Automated invoice generation is deprecated since mr4.0 release of NGCP. The invoice generator script will damage billing records in the database. The rest of the description in "Invoices Generation" section is kept in the handbook for reference purposes only. |
Script is located at: /usr/share/ngcp-panel/tools/generate_invoices.pl
In short:
perl /usr/share/ngcp-panel/tools/generate_invoices.pl --send --prevmonth
perl /usr/share/ngcp-panel/tools/generate_invoices.pl --prevmonth
perl /usr/share/ngcp-panel/tools/generate_invoices.pl --sendonly --prevmonth
perl /usr/share/ngcp-panel/tools/generate_invoices.pl --stime="2015-01-01 00:00:00" --etime="2015-01-31 00:00:00" --regenerate
Some not obvious options:
To see all possible script options use --help or --man:
/usr/share/ngcp-panel/tools/generate_invoices.pl --man
Script will be run periodically as configured by the cron files. Cron files templates can be found at:
After applying your configuration cron file will be located at:
Script uses configuration file located at: /etc/ngcp-invoice-gen/invoice-gen.conf
Except common DB connection configuration following specific options can be defined in the config file:
Comma separated resellers id. Invoice generation will be performed only for the specified resellers.
Comma separated customers id. Invoice generation will be performed only for the specified customers.
Usually is not necessary. Script option --prevmonth will define correct start and end time for the previous month billing period. Generated invoices will include all calls with call start time more then STIME value and less the ETIME value.
Usually is not necessary. Script option --prevmonth will define correct start and end time for the previous month billing period. Generated invoices will include all calls with call start time more then STIME value and less the ETIME value.
Generated invoices will be immediately sent to the customers.
Invoices, already sent to the customers, will be sent again.
Already presented invoices files will be generated again. Otherwise they will stay intouched.
Generate invoices for the already terminated customers too.
Purposed for notifications about invoices generation fails. Not in use now.
All generated invoices can be seen in the invoice management interface Section 4.19.1, “Invoices Management”.
On request each invoice will be sent to the proper customer as e-mail with the invoice PDF in the attachment. Letter content is defined by the invoice email template.
The sip:carrier makes it possible to customize content of the emails sent on the following actions:
Default email templates for each of the email events are inserted on the initial sip:carrier database creation. Content of the default template is described in the corresponding sections. Default email templates aren’t linked to any reseller and can’t be changed through sip:carrier Panel. They will be used to initialize default templates for the newly created reseller.
Each email template refers to the values from the database using special mark-ups "[%" and "%]". Each email template has fixed set of the variables. Variables can’t be added or changed without changes in the sip:carrier Panel code.
Email will be sent after subscriber or subscriber administrator requested password reset for the subscriber account. Letter will be sent to the subscriber. If subscriber doesn’t have own email, letter will be sent to the customer owning the subscriber.
Default content of the password reset email template is:
Template name | passreset_default_email |
From | |
Subject | Password reset email |
Body | Dear Customer, Please go to [%url%] to set your password and log into your self-care interface. Your faithful Sipwise system -- This is an automatically generated message. Do not reply. |
Following variables will be provided to the email template:
Email will be sent on the new subscriber creation. Letter will be sent to the newly created subscriber if it has an email. Otherwise, letter will be sent to the customer who owns the subscriber.
| |
By default email content template is addressed to the customer. Please consider this when create the subscriber with an email. |
Template name | subscriber_default_email |
From | |
Subject | Subscriber created |
Body | Dear Customer, A new subscriber [%subscriber%] has been created for you. Your faithful Sipwise system -- This is an automatically generated message. Do not reply. |
Following variables will be provided to the email template:
Template name | invoice_default_email |
From | |
Subject | Invoice #[%invoice.serial%] from [%invoice.period_start_obj.ymd%] to [%invoice.period_end_obj.ymd%] |
Body | Dear Customer, Please find your invoice #[%invoice.serial%] for [%invoice.period_start_obj.month_name%], [%invoice.period_start_obj.year%] in attachment of this letter. Your faithful Sipwise system -- This is an automatically generated message. Do not reply. |
Variables passed to the email template:
| Invoice fields |
|---|---|
The fields [%invoice.period_start_obj%] and [%invoice.period_end_obj%] provide methods of the perl package DateTime for the invoice start date and end date. Further information about DateTime can be obtained from the package documentation: man DateTime |
| Contact fields example for the "provider". Replace "provider" to client to access proper "customer" contact fields. |
|---|---|
|
Email templates linked to the resellers can be customized in the email templates management interface. For the administrative account email templates of all the resellers will be shown. Respectively for the reseller account only owned email templates will be shown.
To create create new email template press button "Create Email Template".
On the email template form all fields are mandatory:
Name: currently only email template with the following names will be considered by the sip:carrier on the appropriate event Section 4.20.1, “Email events” :
Vertical Service Codes (VSC) are codes a user can dial on his phone to provision specific features for his subscriber account. The format is *<code>*<value> to activate a specific feature, and #<code> or #<code># to deactivate it. The code parameter is a two-digit code, e.g. 72. The value parameter is the value being set for the corresponding feature.
| |
The value user input is normalized using the Rewrite Rules Sets assigned to domain as described in Section 3.6, “Configuring Rewrite Rule Sets”. |
By default, the following codes are configured for setting features. The examples below assume that there is a domain rewrite rule normalizing the number format 0<ac><sn> to <cc><ac><sn> using 43 as country code.
*72*01000, and disable it by dialing #72.
*90*01000, and disable it by dialing #90.
*92*30*01000, and disable it by dialing #92.
*93*01000, and disable it by dialing #93.
*50*101000, which then can be used by dialing *1.
*55*0830.
*31*01000.
*32*, and disable it by dialing #32.
*80*789001000 to call 431000 bypassing block lists.
Subscribers under the same PBX customer can enjoy some PBX-specific features by means of special VSCs.
NGCP provides the following PBX-specific VSCs:
97 - Call Parking: during a conversation the subscriber can park the call with his phone to a "parking slot" and later on continue the conversation from another phone. To do that, a destination must be dialled as follows: *97*3; this will park the call to slot no. 3.
PLEASE NOTE:
*98*3; this will pick up the call that was parked at slot no. 3.
*99*23 on his phone.
You can change any of the codes (but not the format) in /etc/ngcp-config/config.yml in the section sems→vsc. After the changes, execute ngcpcfg apply 'changed VSC codes'.
![[Caution]](images/icons/caution.png){kind=icon} | |
If you have the EMTAs under your control, make sure that the specified VSCs don’t overlap with EMTA-internal VSCs, because the VSC calls must be sent to the NGCP via SIP like normal telephone calls. |
Table 10. VSC Voice Prompts
| Prompt Handle | Related VSC | Message |
|---|---|---|
vsc_error | any | An error has occurred. Please try again later. |
vsc_invalid | wrong code | Invalid feature code. |
reject_vsc | any | Vertical service codes are disabled for this line. |
vsc_cfu_on | 72 (Call Forward Unconditional) | Your unconditional call forward has successfully been activated. |
vsc_cfu_off | 72 (Call Forward Unconditional) | Your unconditional call forward has successfully been deactivated. |
vsc_cfb_on | 90 (Call Forward Busy) | Your call forward on busy has successfully been activated. |
vsc_cfb_off | 90 (Call Forward Busy) | Your call forward on busy has successfully been deactivated. |
vsc_cft_on | 92 (Call Forward on Timeout) | Your call forward on ring timeout has successfully been activated. |
vsc_cft_off | 92 (Call Forward on Timeout) | Your call forward on ring timeout has successfully been deactivated. |
vsc_cfna_on | 93 (Call Forward on Not Available) | Your call forward while not reachable has successfully been activated. |
vsc_cfna_off | 93 (Call Forward on Not Available) | Your call forward while not reachable has successfully been deactivated. |
vsc_speeddial | 50 (Speed Dial Slot) | Your speed dial slot has successfully been stored. |
vsc_reminder_on | 55 (One-Shot Reminder Call) | Your reminder has successfully been activated. |
vsc_reminder_off | 55 (One-Shot Reminder Call) | Your reminder has successfully been deactivated. |
vsc_blockinclir_on | 32 (Block Incoming Anonymous Calls) | Your rejection of anonymous calls has successfully been activated. |
vsc_blockinclir_off | 32 (Block Incoming Anonymous Calls) | Your rejection of anonymous calls has successfully been deactivated. |
WebRTC is an open project providing browsers and mobile applications with Real-Time Communications (RTC) capabilities. Configuring your platform to offer WebRTC is quite easy and straightforward. This allows you to have a SIP-WebRTC bridge in place and make audio/video call towards normal SIP users from WebRTC clients and vice versa.
Sip Provider listens, by default, on the following WebSockets and WebSocket Secure: ws://your-ip:5060/ws, wss://your-ip:5061/ws and wss://your-ip:1443/wss/sip/.
The WebRTC subscriber is just a normal subscriber which has just a different configuration in his Preferences. You need to change the following preferences under Subscribers→Details→Preferences→NAT and Media Flow Control:
The transport_protocol setting may change, depending on your WebRTC client/browser configuration. Supported protocols are the following:
| |
The below configuration is enough to handle a WebRTC client/browser. As mentioned, you may need to tune a little bit your |
In order to have a bridge between normal SIP clients (using plain RTP for example) and WebRTC client, the normal SIP clients' preferences have to have the following configuration:
transport_protocol: RTP/AVP (Plain RTP)
This will teach Sip Provider to translate between Plain RTP and RTP/SAVPF when you have calls between normal SIP clients and WebRTC clients.
Instant Messaging (IM) based on XMPP comes with sip:carrier out of the box. sip:carrier uses prosody as internal XMPP server.
Each subscriber created on the platform have assigned a XMPP user, reachable already - out of the box - by using the same SIP credentials. You can easily open an XMPP client (e.g. Pidgin) and login with your SIP username@domain and your SIP password. Then, using the XMPP client options, you can create your buddy list by adding your buddies in the format user@domain.
| | | |
 |