Skip to main content

Ribbon with ICE-Lite for Teams Direct Routing Trunks with Media bypass

I recently migrate a Teams Direct Routing pair of SBCs from one tenant to another, in other words its a tenant to tenant migration but not a data migration but a pair of SBC :). In this scenario it was full active and running calls like Local SBC since these were connected to different tenant. To explain this clearly, Ill take as an example Tenant A to Tenant B. However I'm planning to discuss in the future, how these calls were connected via tenant A to tenant B SBCs in a different article but this article is about simple mistake and the experience during the preparation to migrate the SBC Tenant A to Tenant B. 

Media bypass enabled

Its common recommendation and best practice coming from Microsoft Teams Direct Routing is use media bypass for all the direct routing deployment or environments, so that call can connect with less RTT (Round Trip Time). This will be totally big topic and scenario can be easy to complex depend on your environment. 

Required dependency 

You cannot run Media Bypass in Teams Direct Routing without enabling ICE Lite on your SBC configuration, the media is kept directly between the Teams user to SBC, Following diagram explain, 


Following call flow diagram explain better

Media bypass uses ICE protocol (RFC5245), to enabled end to end you may need to allow correct range of Microsoft Teams Optimize IPs, URLs, and Ports. Microsoft 365 IP, URLs and Ports are important to keep part of every 3 months maintainer cycles to apply if any changes.


Mistake what i did 

Following configuration is my SIP Trunk to Direct Routing, i have already done with Roots certificates. DNS A records, Firewall NAT as well as security policy related to this. Signal Group configuration in the Ribbon SBC completed as well. 

I can see options are good, able to Ring calls but cant establish a call, but calls are not establish. I found that i have missed to enabled ICE support on NAT Traversal in the MS Teams Direct Routing Signal Trunk. 



Success 

Ribbon logs during success shows, ICE negotiation

v=0
o=- 0 0 IN IP4 52.115.170.249
s=session
c=IN IP4 52.115.170.249
b=CT:4000
t=0 0
m=audio 3479 RTP/SAVP 104 102 9 111 18 0 8 103 97 13 118 119 101
a=rtcp:3480
a=ice-ufrag:0jUT
a=ice-pwd:87ihU5oy0fdzg+aZ/9/SOOdn
a=rtcp-mux
a=candidate:8 1 UDP 1258287615 52.115.170.249 3479 typ relay raddr XXXXX rport 50000 MTURNID 15287110339259904237
a=candidate:8 2 UDP 1258287102 52.115.170.249 3480 typ relay raddr XXXXX rport 50001 MTURNID 16012866942974815766

Fixed



Comments

Popular posts from this blog

Skype for Business announces new Mac client and new mobile sharing experiences

Today Skype for business team publically announce that Skype for business Mac is available to download ( URL ) Its is supporting edge to edge video and full immersive content sharing and viewing, You can get good collaboration experience. And they have updated Skype Operation Framework also about this update. Please refer to them https://www.skypeoperationsframework.com/blogs Enjoy!!!

This Web browser or operating system might not be compatible with Microsoft Silverlight

Crazy error getting from Silver Light while your trying to open newly installed skype for business 2015 on top of Windows Server 2016. Since i installed Silverlight already i was checking control panel the version what i installed its latest and which you can confirm by going to this URL -  https://www.microsoft.com/getsilverlight/locale/en-us/html/Microsoft%20Silverlight%20Release%20History.htm     According to above web and control panel it says same version but my setup cant access the configuration wizard getting following error. to fix nothing do just that add this URL ( https://<pool01FQDN>/cscp to trusted sites and refresh the page then this will go. Note: This error will mislead to check on other browser version and etc and you might check supported version for WinSvr 2016. No required those. Hope this will save your time. Please like FB pages you find more - https://www.facebook.com/office365wwc/   SfB - https://w...

Microsoft Teams user administration using Set-CsOnlineVoicemailUserSettings

Now tenant admin can help with user for custom greetings,  DefaultGreetingPromptOverwrite and  DefaultOofGreetingPromptOverwrite many other user settings on behalf of users. This may help to end users when they are away to set up forwarding rules to another colleague or external number etc. Set-CsUserCallingSettings  -Identity "madushka@abc.com"  -IsForwardingEnabled $True -ForwardingType Immediate -ForwardingTarget taniya@abc.com -ForwardingTargetType SingleTarget - Verbose Note : You must have PhoneSystem License attached for you to have this forwarding to a another person. Basically both users must have PhoneSystem License.  Forward to external number   when you try this make sure you are using E.164 standard for phone numbers.  Set-CsUserCallingSettings -Identity " madushka@abc.com"   -IsForwardingEnabled $True -ForwardingType Simultaneous -ForwardingTargetType SingleTarget -ForwardingTarget "+1365888xxx"  - Verbose Note : You...