<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
While functionally, yes, you are correct; the media address does not need to be in the SIP ACL. However, and this is mostly from my experience, that in doing so, adds a measure of resiliency without a significant security or performance risk should something
change. <br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
This experience mostly comes from dealing with small regional CLECs that tend to, "do whatever the hell they want" and may switch signaling/media ..etc. Granted, a bigger carrier like CenturyLink is highly unlikely to do something like that or at least without
a decent amount of notification.</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks,</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Ryan<br>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> NateCCIE <nateccie@gmail.com><br>
<b>Sent:</b> Wednesday, September 12, 2018 9:54 PM<br>
<b>To:</b> 'Ryan Huff'; 'Jason Aarons (Americas)'; 'cisco-voip'<br>
<b>Subject:</b> RE: [cisco-voip] CUBE setup to Centurylink SIP Trunk</font>
<div> </div>
</div>
<meta content="text/html; charset=Windows-1252">
<meta name="x_Generator" content="Microsoft Word 15 (filtered medium)">
<div link="blue" vlink="purple" lang="EN-US">
<div class="x_WordSection1">
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
I don’t see any reason to include the media address in the trusted list. That would be like including all IP phones in the trusted list.</p>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
A lot of the time I only route specific IPs to the outside next hop, as a security measure. If they didn’t indicate where the media was coming from, it would be easy to miss that and get one way audio.</p>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
And centurylink has many SIP plaforms, the registration one with multi-tennant configs for dual registration is the Broadsoft platform, the sonos platform isn’t adding new customers, and then there is the IP TollFree/LD, that one is still current and doesn’t
require registration. There also are at least two Level3 platforms that are now “centurylink”</p>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
Thanks,</p>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
-Nate</p>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<b>From:</b> cisco-voip <cisco-voip-bounces@puck.nether.net> <b>On Behalf Of </b>
Ryan Huff<br>
<b>Sent:</b> Wednesday, September 12, 2018 7:31 PM<br>
<b>To:</b> Jason Aarons (Americas) <jason.aarons@dimensiondata.com>; cisco-voip (cisco-voip@puck.nether.net) <cisco-voip@puck.nether.net><br>
<b>Subject:</b> Re: [cisco-voip] CUBE setup to Centurylink SIP Trunk</p>
</div>
</div>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<div>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
Target the signaling address in your dial peers, the media address will be advertised in the SDP. Make sure to include both in your IP Trusted List ACL (under the voice service voip configuration) as well as any CUCM signaling nodes that are not directly targeted
by a dial-peer (but I typically add all the nodes in regardless, just as a measure of safety).</p>
</div>
<div>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
</div>
<div>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
Thanks,</p>
</div>
<div>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
</div>
<div>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
Ryan</p>
</div>
<div class="x_MsoNormal" style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;text-align:center" align="center">
<hr width="98%" size="3" align="center">
</div>
<div id="x_divRplyFwdMsg">
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<b><span style="color:black">From:</span></b><span style="color:black"> cisco-voip <<a href="mailto:cisco-voip-bounces@puck.nether.net">cisco-voip-bounces@puck.nether.net</a>> on behalf of Jason Aarons (Americas) <<a href="mailto:jason.aarons@dimensiondata.com">jason.aarons@dimensiondata.com</a>><br>
<b>Sent:</b> Wednesday, September 12, 2018 8:37 PM<br>
<b>To:</b> cisco-voip (<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a>)<br>
<b>Subject:</b> [cisco-voip] CUBE setup to Centurylink SIP Trunk</span> </p>
<div>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
</div>
</div>
<div>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;margin-bottom:12.0pt">
</p>
<div>
<p style="margin-top: 0px; margin-bottom: 0px;">I have a new CenturyLink SIP Service. CenturyLink said it is new and doesn't match the Cisco guides. (No more of the funky registrar and fixup headers via SIP profiles!)</p>
<p style="margin-top: 0px; margin-bottom: 0px;"> </p>
<p style="margin-top: 0px; margin-bottom: 0px;">In short in CUBE they want me to send calls to them per these settings;</p>
<p style="margin-top: 0px; margin-bottom: 0px;">SIP Signaling IP 6.6.156.245:5060</p>
<p style="margin-top: 0px; margin-bottom: 0px;">RTP IP 6.6.156.244</p>
<p style="margin-top: 0px; margin-bottom: 0px;">I'm just drawing a blank on how to setup CUBE to send SIP signaling requests to CenturyLink with different Signaling and RTP destination addresses. Don't I just send session target ipv4:X.X.156.245:5060 and the
SDP takes care of the RTP negotiation part? Do I really care in my CUBE what their RTP address is?</p>
<p class="x_xmsonormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<p class="x_xmsonormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<p class="x_xmsonormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
-jason</p>
<p class="x_xmsonormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
</div>
<p class="x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<br>
<br>
This email and all contents are subject to the following disclaimer:<br>
<a href="https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur04.safelinks.protection.outlook.com%2F%3Furl%3Dhttp%253A%252F%252Fwww.dimensiondata.com%252FGlobal%252FPolicies%252FPages%252FEmail-Disclaimer.aspx%26data%3D02%257C01%257C%257Cce21fa3547064a9bd8a008d619112c06%257C84df9e7fe9f640afb435aaaaaaaaaaaa%257C1%257C0%257C636723958879576925%26sdata%3D2PDRGixdvFatDGAD1sCQrYgXUKSWNBa3LSzCbk7wYJQ%253D%26reserved%3D0&data=02%7C01%7C%7Cc2c08ca28d6a4d39cff208d6191bca6f%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636724004485171057&sdata=wWlL90U9dsyW%2FQEbY1aKfwn33Cc6Z7J8feMe7zykNso%3D&reserved=0" originalsrc="https://eur04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.dimensiondata.com%2FGlobal%2FPolicies%2FPages%2FEmail-Disclaimer.aspx&data=02%7C01%7C%7Cce21fa3547064a9bd8a008d619112c06%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636723958879576925&sdata=2PDRGixdvFatDGAD1sCQrYgXUKSWNBa3LSzCbk7wYJQ%3D&reserved=0" shash="ZSQaU6+7hj0ZuaIR2lJYRDFo57Q/l1Ncb/aO0EVntbIHKYZKITtuCaCFHlaXzEFc5EpZZljJi9wp7XJd+Jvg7TCZX1FumNfERYo5tBefHy2kwcgMzGJABb76MOns6l9Czsvx2Mz8DBH3NioNrDmE67+KYoA0G2xQmvac5JUNm3k=" target="_blank">"http://www.dimensiondata.com/emaildisclaimer"</a>
</p>
</div>
</div>
</div>
</body>
</html>