AASTRA BluStar 8000i BAS-Mode Administrator Guides EN - Manual (Page 161)

SBC Solution Configuration
41-001391-00 Rev 03 – 04.2012 12-9
SBC Solution Configuration
Session Border Controller (SBC) allows users to use their BluStar 8000i terminal at a remote location (outside the com-
pany’s firewall), while still accessing the corporate server. Administrators can configure SBC for users using the BAS and the
user’s BluStar terminal. In order for administrators to configure SBC, IT must complete DNS, firewall, and SBC configuration
(steps 1 and 2 below).
Limitations
• SBC is only supporting point-to-point calls. You can make a point-to-point call to/from an SCB user, however, you can-
not conduct a three way conference call if any of the participants are a SBC user.
• SBC is not supported when an HA BAS pair is used.
• You can only have one terminal at a remote location that has one internet connection. For example, you cannot put two
terminals at a remote location behind the same router. If you have two internet connections at a remote location, then
you can put one terminal behind one router, and the second with the other one.
To Configure SBC Solution
1. IT must configure DNS:
a) External DNS mappings:
– server1.aastra.com (Firewall external IP address)
– server2.aastra.com (SBC external IP address)
b) Internal DNS mappings:
– server1.aastra.com (Internal IP address 1 of BluStar Application Server)
– server2.aastra.com (Internal IP address 1 of BluStar Application Server)
2. IT must configure Firewall and SBC Configuration:
a) FW configuration:
– server2.aastra.com: 5060 (Internal IP address 1 of BluStar Application Server:5060)
– server2.aastra.com:5061 (Internal address 1 of BluStar Application Server:5061)
3. BluStar Application Server Configuration.
a) Configure the second IP address for the BAS.
– SSH into the BAS and execute ./vconfig. Under Network Configuration > Internal BAS > Single or Master
Node > Secondary IP Address and Mask, configure the Internal IP address 2 of the BluStar Application Server.
b) Create the certificate for the second BAS IP address.
– SSH into the BAS and execute vipr_cert_config2. Use the Firewall external IP address.
c) Change the following settings to /etc/httpd/conf.d/ssl2.conf with the highlighted IP addresses changed.
Internal IP address 2 of
Blustar Application Server :443>##IPV4 IP ## SeverName Firewall external IP
address .
d) Restart the httpd service.
– SSH into the BAS and execute apachectl graceful.