秘密 Proprietary Confidential▲

ZXUN CSCF System Networking

 秘密 Proprietary Confidential▲

Course Outline

 ZXUN CSCF System Networking Overview

 ZXUN CSCF System Network Classification
 ZXUN CSCF System Device Overview
 ZXUN CSCF System Networking Details
 ZXUN CSCF System Address Planning
 ZXUN CSCF Typical Case Overview
 秘密 Proprietary Confidential▲

Course Outline

 ZXUN CSCF System Networking Overview

 ZXUN CSCF System Network Classification
 ZXUN CSCF System Device Overview
 ZXUN CSCF System Networking Details
 ZXUN CSCF System Address Planning
 ZXUN CSCF Typical Case Overview
 秘密 Proprietary Confidential▲

Location of the ZXUN CSCF in the IMS Network

 秘密 Proprietary Confidential▲

ZXUN CSCF Function Overview

 P-CSCF: Provides the agent function for subscribers’ IMS service,
signaling security function, bearer authorization function, and charging
policy download function. When a UE acquires IMS service, the P-CSCF is
the first contact node.
 I-CSCF: Provides the allocation function in the home network S-CSCF
(during subscriber registration), and routing function for IMS incoming
calls. In some cases, an implicit internal logic may be required between
different operators, so the I-CSCF needs to hide the network topology at
this time.
 S-CSCF: Provides subscriber authentication, registration, service
authorization, service triggering, service routing, and charging functions.
 BGCF: The BGCF is used to select the network to connect to the contact
point in the PSTN (or CS). It is usually co-located with the S-CSCF.
 E-CSCF: The call control NE for emergency calls (E-CSCF) is in charge of
session control and session status maintenance for emergency calls. It is
usually co-located with the S-CSCF.
 秘密 Proprietary Confidential▲

ZXUN CSCF Network Planes

 IP networks of the ZXUN CSCF are divided into six planes. Among
them, the debugging network (base plane, on 128 segment) and
internal small network (fabric plane, on 172 segment) are internal
networks, while other networks are external networks.
 Internal network:
Debugging network: base plane, 128 segment
Internal small network: fabric plane, 172 segment
 External network
NM network: a network for the NM server to connect to external devices, such
as 10.44.108.221
IMS signaling network: such as 10.1.46.13
Billing network: According to the operator’s requirements, it can be co-located
with the IMS signaling network or be a separate network, such as
10.2.46.13
 秘密 Proprietary Confidential▲

ZXUN CSCF Networking

 Why to consider networking?
Because the ZXUN CSCF involves several network planes, each of which is
involved with different networks. To implement physical or logical network
cutover, the ZXUN CSCF needs to connect to different interfaces through
different interfaces. These networks include the signaling network, media
network, accounting network, NM network, charging network, and terminal
network.
 Concepts related to system networking
Dual-network dual-plane, routing protocol, BFD protocol, VRRP protocol,
loopback address, NIC binding.
 Functions to be supported by the NE in the system architecture
1. The NE must support multiple network interfaces, so that it can be
connected to different networks physically.
2. The NE must support specified routing protocols, so that it can send
messages from different networks into the corresponding network.
3. The NE must support network security access and can provide specific ports
to provide services.
 秘密 Proprietary Confidential▲

Course Outline

 ZXUN CSCF System Networking Overview

 ZXUN CSCF System Network Classification
 ZXUN CSCF System Device Overview
 ZXUN CSCF System Networking Details
 ZXUN CSCF System Address Planning
 ZXUN CSCF Typical Case Overview
 秘密 Proprietary Confidential▲

ZXUN CSCF System Network Classification

 The ZXUN IMS system includes multiple function entities, such
as service commissioning, subscriber database, service
processing, billing, NM, policy control, and network interworking.
Internal and external interfaces on these NEs must be planned
in a unified manner. At the same time, in the IMS core network,
data streams are divided into signaling, media, NM, and
charging. During networking, these networks must be physically
isolated to avoid impacts between networks.
 秘密 Proprietary Confidential▲

ZXUN IMS System Network Zones

Internet Access OSS

Session Zone OSS Zone

User Access Zone

NetNumen U31
ZXEDS
ZXUN CSCF ZXUN HSS EMS
ENUM/DNS
ZXUN CSCF I/S-CSCF/BGCF HSS/SLF
ZXUN B200
P-CSCF

ZXUN RCP NE Local OMMs

ZXUN xAGCF AS WEB PCRF/SPDF OMM
Portal /A-RACF Core Zone
Border Access Zone OSS/BSS

Internal LAN (physical/logical isolation, access control)

Interconnect Zone Service Zone Media Zone Billing&Provisioning

Zone

…
ZXWN MSCS ZXWN MGW CM3000 ZXUN CG Provisioning SPN
ZXUN SSS IN-ICCS ZXWN MGW
MGCF SGW/MGW MRS CCF/CG Interface
MMTEL IP-CETREX MGW
Machines

$
Other Packet network
BSS
 秘密 Proprietary Confidential▲

Involved Network Architectures

 Signaling network – CN devices
The ZXUN CSCF is connected to the signaling network through
the IPI. To ensure security of the CN, the SBC must be added.
 NM network
The ZXUN CSCF is connected to the NM network through port
3/4 on the NM board, to realize dual-network dual-plane.
 Internal network
The ZXUN CSCF communicates with the front-end OMP
through the Fabric plane, and communicates with the CMM
through the CMM plane.
 秘密 Proprietary Confidential▲

Course Outline

 ZXUN CSCF System Networking Overview

 ZXUN CSCF System Network Classification
 ZXUN CSCF System Device Overview
 ZXUN CSCF System Networking Details
 ZXUN CSCF System Address Planning
 ZXUN CSCF Typical Case Overview
 秘密 Proprietary Confidential▲

ZXUN CSCF Physical Wiring

 秘密 Proprietary Confidential▲

ZXUN CSCF Network Interface Devices

 Internal network interface
Base plane (in charge of internal signaling, communication with
the NCMM)
Fabric plane (in charge of communication between the OMP and
the OMM)
 External network interface
NM rear-card interface (in charge of communication with the NM
network)
Signaling rear-card interface (in charge of communication with
signaling devices)
USCC rear-card interface (in charge of inter-shelf cascading and
communication with the disk array)
 秘密 Proprietary Confidential▲

ZXUN CSCF Hardware-SWI2

 秘密 Proprietary Confidential▲

ZXUN CSCF Hardware-RSB/A

 秘密 Proprietary Confidential▲

Course Outline

 ZXUN CSCF System Networking Overview

 ZXUN CSCF System Network Classification
 ZXUN CSCF System Device Overview
 ZXUN CSCF System Networking Details
 ZXUN CSCF System Address Planning
 ZXUN CSCF Typical Case Overview
ZXUN IMS Logical Network Architecture 秘密 Proprietary Confidential▲

$ PC Client IAD/EPON
PC Client
有线无线接入
+(HSDPA)
BSS
3G手机
SIP PHONE Internet
FW03 FW04 PE2
PE1
Other IMS sites
L41 L42
FW01
FW02
option
Accounting zone
Billing&Provisioning L21 L22
CG/IMP/etc.
IMS PE5 R11 SR1
R11
dedicated Media Zone WAN/Operat
network User Access Zone SR2ors'
CM3000/MGW etc.. SBC/PCSCF/AGCF backbone
Signaling VPN etc.. network
IAD/EPON
R12 R12 SIP AG/H.248AG

Media VPN R01

Session zone/Session R01
I/S-CSCF/HSS/RCP Interconnect Zone
PE6
MGCF/MGW etc…
Service zone/Session
R02 PSS/IP CENTREX R02

L23 L24
OSS Zone
EMS U31/Local OMM PE3 PE4

Signaling PLMN/PSTN based IP

L31 L32
Media

NM FW03 FW04

Accounting
 秘密 Proprietary Confidential▲

ZXUN IMS Networking Overview

 The user access zone is oriented towards users, in charge of interconnecting with various access networks of the IMS (including fixed and mobile access
modes). It includes the SBC, P-CSCF, AGCF, and WEB PORTAL. In the user access zone, a pair of L3 switches L21/L22 need to converge signaling and
media networks. At the same time, FW01/FW02 firewall devices should be added between the L21/L22 and the public router (if a firewall has been set in the
operator’s access network, this pair of firewalls do not need to be configured). Under certain scenarios, users can be connected to the bearer through the
operator’s WAN or the backbone network VPN. For system-side signaling and media networks, this zone converge signaling and networks through shared
R01/R02 and R11/R12.
 In other network interworking zones, the IMS interworks with other networks, including the MGCF and the MGW. A pair of L3 switches L23/L24 need to be
deployed to converge signaling and media networks. In some scenarios, they can share the switch in the CS domain. For system-side signaling and media
networks, this zone converge signaling and media networks through shared R01/R02 and R11/R12.
 The session zone includes core NEs of the IMS (CSCF, HSS, ENUM). A pair of routers R01/R02 are deployed to converge the signaling network, and a pair
of routers R11/R12 are deployed to converge the media network. If the operator already has a voice network, for the convenience of interworking, the fixed-
network softswitch or mobile softswitch address zone is used.
 The service area includes IMS service application NEs (PSS, IP Centrex, and third-party SIP AS). Because addresses in the service domain may be in
different address domains with the IMS CN address, the CE device is deployed to converge signaling and media networks, to interconnect with the CN
through the CE. The WEB Portal interface from the AS to the public network is physical isolated from service interfaces, and a firewall is configured at the
front (FW01/FW02 can be shared). In some cases, if the CN equipment room is co-located with the service equipment room, the service network and CN
network have the same address domain, so we can consider sharing the switch in the session zone and combine it into the session zone.
 In principle, security zones are physically isolated and different VLANs are configured. NEs that belong to different security zones should better not share
boards in commercial offices, to avoid internal IP faults in different security zones.
 In principle, for the IMS CN to interconnect with external NEs, firewalls must be configured, such as to interconnect to the NM, charging, user access
network, CS interconnection network, or IMS dedicated network. However, in the actual situations, the operator’s IMS VPN dedicated network and CS
dedicated network are service dedicated networks and firewalls are usually not configured. It is recommended that the ACL policy be configured on the CE to
avoid virus attacks.
 If the service zone and the session zone are not in the same equipment room, they can be directly connected to the R01/R02 through the IMS dedicated
network or transmission.
 Between the switch and the AR, if AR resources permit, it is recommended that the signaling and media physical ports be separated. In the actual situations,
if there is only one pair of optical interfaces due to restriction of transmission resources, the signaling and media networks must use different VLANTAGs,
that correspond to different VLAN sub-interfaces and VPNs, that is, VRF association.
 The OSPF/IS-IS dynamic routing protocol is enabled between the switch/CE and the AR, and the static route+BFD mode or active/standby+VRRP mode is
used between the switch and the IMS.
 In some test offices or small-capacity offices, switches in different security zones can be shared. They are isolated through physical ports and different
VLANs are configured.
 The MSTP/RSTP protocol must be enabled on all switches, to avoid L2 loopback due to mis-operations. The loopback is not good in the network
architecture.
 When the GES/USCC is connected to external switches, it is forbidden to use MSTP/RSTP on the GES and the USCC (in the current network architecture).
 秘密 Proprietary Confidential▲

ZXUN CSCF Networking Details – NM Network

1
1 2
2 3
3 4
4 5
5 6
6 7
7 8
8 9
9 10
10 11
11 12
12 13
13 14
14

OMM OMM

1 1

2 2

3 3

4 4

NM switch NM switch
Cascading
wire

CE router VRRP CE router

Switch

EMS, NM client
 秘密 Proprietary Confidential▲

ZXUN CSCF NM Networking Overview

 Port 3 and port 4 on the rear card of the ZXUN CSCF NM
should bind NICs.
 Port 3 and port 4 on the rear card of the ZXUN CSCF NM
should connect to active/standby NM switches respectively.
 The active/standby NM switches should only be enabled with
the L2 function as the heartbeat of the L3 switch VRRP.
 The VRRP protocol is enabled on the CE router.
 The static routing protocol is enabled on NM devices, and the
route of the NMS is used as the default route.
 At any time, if a switch fails, NM communication should not be
affected, and NMS switching should not occur.
ZXUN CSCF Networking Details – Signaling 秘密 Proprietary Confidential▲

Network
1
1 2
2 3
3 4
4 5
5 6
6 7
7 8
8 9
9 10
10 11
11 12
12 13
13 14
14

IPI IPI

1 1

2 2

3 3

4 4

CE router VRRP CE router CE router VRRP CE router

Switch Switch

CSCF CG
 秘密 Proprietary Confidential▲

ZXUN CSCF Signaling Networking Overview

Master IPI1 IP bearer

IP_1 IP_ce1 network 1
Servi
ce
proc IP V Tar
Same as IP_1 _ R
essin
v R get
g during binding rr
p P add
mod
ule ress
Service IP_ce2 IP bearer
IP_1
address Slave IPI2 network 2
IP_3

 In the IP signaling network, the IPI board is directly connected to the CE

device, and connected to the opposite device through a device in the IP
signaling bearer network. Through the IP and routing configuration on network
devices, two paths are formed between two ends to achieve communication.
These two paths operate in active/standby mode. The application interface
messages forwarded in the CSCF (such as the Gm, Mw, Cx, Gq’, and E2) are
divided into two types: SIP messages and Diameter messages. The IPI have
the same route to forward these two messages.
 秘密 Proprietary Confidential▲

Course Outline

 ZXUN CSCF System Networking Overview

 ZXUN CSCF System Network Classification
 ZXUN CSCF System Device Overview
 ZXUN CSCF System Networking Details
 ZXUN CSCF System Address Planning
 ZXUN CSCF Typical Case Overview
ZXUN CSCF System Address Planning Principle 秘密 Proprietary Confidential▲

(1)
IP address: 172.X.Y.Z Mask: 255.255.240.0
 X is the bureau number Bno.
 Y is the plane ID and rack ID: Y=PlaneID<<4+rack.
Plane: PlaneID is the ID of the internal plane (4Bits) and PlaneID=1-15.
PlaneID=1 means the address segment from the OMM to the OMP.
PlaneID=2 means the segment used in internal communication o the CS CU.
PlaneID=3 means the heartbeat address segment.
PlaneID=4 means the internal address segment of the NCMM.
Under the prerequisite that NE features do not violate the above definition of
PlaneID, each product can expand other undefined PlaneIDs.
Rack is the rack ID (4Bits): Rack=1-15.
ZXUN CSCF System Address Planning Principle 秘密 Proprietary Confidential▲

(2)
 Z indicates the shelf and slot information: Z=shelf<<6+slot.
Floating IP address of active/standby boards = Physical IP address of
the board in the left slot + 30
Shelf=1-3
Slot (6Bits): Slot=1-30
 Floating IP address of active/standby boards = Physical IP address of
the board in the left slot + 30
The floating IP address is only configured for the OMP/NCMM.
 Special description about the address planning scheme when the IMS
and other multiple NEs share the same shelf.
1. When the OMM manages several OMPs, on the plane with
PlaneID=1, several bureau numbers exist and the Bno takes the
minimum bureau number. (This planning only affects the IP address of
this plane).
2. When the NCMM is managed by several OMMs, on the plane with
PlaneID=5, several bureau numbers exist and the Bno takes the
maximum bureau number. (This planning only affects the IP address
of this plane).
 秘密 Proprietary Confidential▲

ZXUN CSCF Internal Address Planning Table (3)

Question: If the NE ID of the ZXUN CSCF is 1, rack ID is 1, and

shelf ID is 2, what are the floating IP address of the OMM, the IP
address of the OMP in slot 9, and the IP address of the NCMM?
 秘密 Proprietary Confidential▲

Course Outline

 ZXUN CSCF System Networking Overview

 ZXUN CSCF System Network Classification
 ZXUN CSCF System Device Overview
 ZXUN CSCF System Networking Details
 ZXUN CSCF System Address Planning
 ZXUN CSCF Typical Case Overview
 XXGMGW XX 固网 GW XX 固网 -GW C 网 LSPT
秘密 Proprietary Confidential▲
2E1*2
FW-3/4
2E1 2E1*2 2E1*2 2E1

NM convergence switch,
and VLANs are used to
divide the accounting and NM switch
Billing switch
charging networks. Each3952 3952
NE has a connection to the
NM convergence switch.

DCN
AGCF P/I/S-CSCF MRFC EMS SPN HSS CG
MGCF MGW SIU SSP Web Port 网管 / 计费中心
AS MRS /BGCF MRFP

5928 5928 8905 8905 XX core

equipment room
FW-1/2

BAC BAC NM switch

电信大厦 PE 武林 PE

CN2 新城
PE
武林 SR
南站
PE
INTERNET/
MAN 电信大厦 南站 新城
CDMA CE CE CE
8905

CDMA network Legend

景芳 CE BAC
BAC FE
南站 CE
东新 CE GE

Fixed network
新城 CE
SR SR
signal
MAN
softswitch media

XX TDM

equipment room Exiting

network inte
IMS network architecture of XX
秘密 Proprietary Confidential▲