Release Notes - Huawei Enterprise
Transcription
Release Notes - Huawei Enterprise
Huawei Enterprise Communications Solution V300R001 Overview Issue 01 Date 2016-06-30 HUAWEI TECHNOLOGIES CO., LTD. Copyright © Huawei Technologies Co., Ltd. 2016. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd. Trademarks and Permissions and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd. All other trademarks and trade names mentioned in this document are the property of their respective holders. Notice The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the products, services and features described in this document may not be within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information, and recommendations in this document are provided "AS IS" without warranties, guarantees or representations of any kind, either express or implied. The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute a warranty of any kind, express or implied. Huawei Technologies Co., Ltd. Address: Huawei Industrial Base Bantian, Longgang Shenzhen 518129 People's Republic of China Website: http://e.huawei.com Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd. i Huawei Enterprise Communications Solution Overview About This Document About This Document Purpose This document describes the Enterprise Communications (EC) solution from aspects of the architecture, components, networking, and features. Intended Audience This document is intended for: Huawei technical support engineers Enterprise system administrators Huawei pre-sale engineers Symbol Conventions The symbols that may be found in this document are defined as follows. Symbol Description Indicates an imminently hazardous situation which, if not avoided, will result in death or serious injury. Indicates a potentially hazardous situation which, if not avoided, could result in death or serious injury. Indicates a potentially hazardous situation which, if not avoided, may result in minor or moderate injury. Indicates a potentially hazardous situation which, if not avoided, could result in equipment damage, data loss, performance deterioration, or unanticipated results. NOTICE is used to address practices not related to personal injury. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd. ii Huawei Enterprise Communications Solution Overview Symbol About This Document Description Calls attention to important information, best practices and tips. NOTE is used to address information not related to personal injury, equipment damage, and environment deterioration. General Conventions Convention Description Times New Roman Normal paragraphs are in Times New Roman. Boldface Names of files, directories, folders, and users are in boldface. For example, log in as user root. Italic Book titles are in italics. Courier New Terminal display is in Courier New. Command Conventions Convention Description Boldface The keywords of a command line are in boldface. Italic Command arguments are in italic. [] Items (keywords or arguments) in square brackets [ ] are optional. { x | y | ... } Alternative items are grouped in braces and separated by vertical bars. One is selected. [ x | y | ... ] Optional alternative items are grouped in square brackets and separated by vertical bars. One or none is selected. { x | y | ... } * Alternative items are grouped in braces and separated by vertical bars. A minimum of one or a maximum of all can be selected. [ x | y | ... ] * Alternative items are grouped in braces and separated by vertical bars. None or a maximum of all can be selected. GUI Conventions Convention Description Boldface Buttons, menus, parameters, tabs, window, and dialog Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd. iii Huawei Enterprise Communications Solution Overview Convention About This Document Description titles are in boldface. For example, click OK. Multi-level menus are in boldface and separated by the ">" signs. For example, choose File > Create > Folder. > Keyboard Operation Format Description Key Press the key. For example, press Enter and press Tab. Key 1+Key 2 Press the keys concurrently. For example, pressing Ctrl+Alt+A means the three keys should be pressed concurrently. Key 1, Key 2 Press the keys in turn. For example, pressing Alt, A means the two keys should be pressed in turn. Mouse Operation Action Description Click Select and release the primary mouse button without moving the pointer. Double-click Press the primary mouse button twice continuously and quickly without moving the pointer. Drag Press and hold the primary mouse button and move the pointer to a certain position. Change History Changes between document issues are cumulative. The latest document issue contains all the changes made in earlier issues. Issue 01 (2016-06-30) This issue is the first release. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd. iv Huawei Enterprise Communications Solution Overview Contents Contents About This Document .................................................................................................................... ii 1 Solution Overview ........................................................................................................................ 7 2 Solution Highlights ...................................................................................................................... 8 2.1 Converged Collaboration Creates More Efficient Office ................................................................................. 8 2.2 Added Flexibility for Mobile Work Styles ..................................................................................................... 10 2.3 Comprehensive Redundancy and Protection for High Security and Reliability ............................................. 11 2.4 Openness and Convergence Make Businesses More Agile ............................................................................ 11 2.5 Intelligent and Easy Management Reduces O&M Costs ............................................................................... 12 3 Component Introduction ............................................................................................................. 1 3.2 Video Phone 8950 ............................................................................................................................................ 2 3.3 IP Phone 7900 Series ........................................................................................................................................ 7 3.4 Clients ............................................................................................................................................................ 14 3.5 Integrated Access Device (IAD) ..................................................................................................................... 19 3.6 Unified Gateway U1900 Series ...................................................................................................................... 22 3.7 Unified Session Manager (USM) ................................................................................................................... 26 3.8 Enhanced Communications Suite (ECS) ........................................................................................................ 28 3.9 Unified Messaging System (UMS) ................................................................................................................ 30 3.10 Enterprise Meeting Portal (EMP) ................................................................................................................. 31 3.11 Management and Maintenance Component ................................................................................................. 33 4 Networking Series ...................................................................................................................... 37 4.1 IPT Networks ................................................................................................................................................. 38 4.1.1 Single-Node Network ........................................................................................................................... 38 4.1.2 Multi-Node Centralized Network ......................................................................................................... 40 4.1.3 Multi-Node Distributed Network .......................................................................................................... 42 4.1.4 U1900 Series Disaster Recovery Network ............................................................................................ 44 4.2 UC Networks .................................................................................................................................................. 45 4.2.1 Single-Node Network ........................................................................................................................... 45 4.2.2 Multi-Node Centralized Network ......................................................................................................... 47 4.3 Convergent Conference Networks ................................................................................................................. 49 4.3.1 Web Conference Network ..................................................................................................................... 49 4.3.2 Web+VC Cascading Network ............................................................................................................... 50 Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd. v Huawei Enterprise Communications Solution Overview Contents 4.3.3 IPT+VC Cascading Network ................................................................................................................ 51 4.3.4 UC+VC Multimedia Cascading Network ............................................................................................. 52 4.3.5 UC+VC MCU-Centric Network ........................................................................................................... 54 5 Key Features ................................................................................................................................. 56 5.1 IPT Features (U1900 SERIES)....................................................................................................................... 56 5.2 UC Features .................................................................................................................................................... 61 5.3 Convergent Conference Feature ..................................................................................................................... 62 6 Reliability ..................................................................................................................................... 63 6.1 Reliability Panorama ...................................................................................................................................... 63 6.2 Redundancy for Key U1900 SERIES Modules .............................................................................................. 66 6.3 Two-Node Cluster and Multi-Node Cluster ................................................................................................... 68 6.4 Remote Disaster Recovery ............................................................................................................................. 73 6.5 Local Regeneration ........................................................................................................................................ 78 6.6 IAD Network-Outage Local Switching and U1900 SERIES Power-Off Survival ......................................... 80 6.7 Terminal Reliability ........................................................................................................................................ 82 7 Security.......................................................................................................................................... 83 7.1 Terminal Access Security ............................................................................................................................... 83 7.2 Communication Service Security ................................................................................................................... 84 7.3 Management Plane Security ........................................................................................................................... 87 7.4 IP Network Security ....................................................................................................................................... 88 8 Openness ...................................................................................................................................... 91 9 Management and Maintenance ................................................................................................ 95 9.1 Centralized NE Monitoring ............................................................................................................................ 95 9.2 Centralized Service Management ................................................................................................................... 97 9.3 Local Installation Configuration and Maintenance ...................................................................................... 101 9.4 Statistics Query ............................................................................................................................................ 103 Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd. vi Huawei Enterprise Communications Solution Overview Contents 1 Solution Overview The Huawei Enterprise Communications (EC) solution integrates multiple media capabilities including voice, HD videoconferencing, content sharing, and multimedia to implement IP telephony (IPT), mobile office, and remote collaboration applications for enterprises of all sizes. This solution helps customers build a media-rich communications system needed for more effective communication and collaboration both inside and outside of the enterprise to achieve better business outcomes. Huawei EC is user-centric, meaning that it prioritizes user experience. It helps enterprise customers build an efficient, easy-to-use, and easy-to-manage converged communications system that features high reliability and mobility, convenient collaboration, strong security, and easy integration. Figure 1-1 Huawei Enterprise Communications Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd. 7 Huawei Enterprise Communications Solution Overview Contents 2 Solution Highlights Huawei EC is user-centric, meaning that it prioritizes user experience. It helps enterprise customers build an efficient, easy-to-use, and easy-to-manage converged communications system that features high reliability and mobility, convenient collaboration, strong security, and easy integration. 2.1 Converged Collaboration Creates More Efficient Office Converged Omnimedia, Easy to Use Full-service integration for efficient communication Huawei EC integrates capabilities including voice, video, IM, presence, group, corporate directory, web collaboration, and conferencing, allowing users to enjoy these services at their own convenience, no matter where they are (in the conference room, hotel, office, or at home). Clients with intuitive user interfaces and comprehensive functions Users can easily access Huawei Enterprise Communications applications and switch between multiple communication modes (messaging, voice calling, video calling, and multimedia conferencing) using the PC client (Desktop Client) or mobile phone soft client (Mobile Client). These function-rich terminals deliver consistent user experience and can help users improve their communication experience and work efficiency. Portable information for uninterrupted communication The same account can be used to log in to Desktop Client and Mobile Client at the same time. Historical messages and contact information are automatically synchronized between the two, and online messages and offline messages are actively pushed. This ensures consistent information and uninterrupted communication. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd. 8 Huawei Enterprise Communications Solution Overview Contents Figure 2-1 Multimedia Convergence for More Efficient In-Conference Collaboration Integration of HD Voice, Video, and Data for Efficient Collaboration HD videoconferencing provides a premium communication experience. Different types of endpoints, including PCs, mobile phones, IP phones, video phones, and HD video endpoints, can join the same convergent conference, where content can be easily shared. Enterprise employees in different locations can have face-to-face communication with each other through convergent conference, which helps enterprises reduce travel and communication expenses. Content convergence increases team cooperation. Sharing documents, PC desktops, whiteboards, or media files in a conference allows participants to easily obtain key information. Asynchronous document browsing allows participants to freelyturn pages of a document that the presenter shares. Webbased collaboration extends team cooperation beyond just one enterprise, enabling its partners or customers to collaborate and grow with the enterprise. Figure 2-2 Integration of HD Voice, Video, and Data for Efficient Collaboration Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd. 9 Huawei Enterprise Communications Solution Overview Contents High-Quality Communication and Close Collaboration Users expect smooth communication with high-quality audio and video even if network quality deteriorates. Huawei EC meets user expectations by employing advanced equipment and technologies, such as: Opus dynamic codec and Huawei's proprietary NetBrain intelligent voice computing technologies. These technologies enable the system to dynamically adjust transmission bandwidth based on the network quality. Even when the packet loss rate reaches 20%, users can enjoy high-quality voice communication. 48 kHz full-band voice codec, which provides crystal-clear audio performance. Huawei's full-HD Video Phone 8950, which supports video conferences held on the server. The IP phone can interact with Desktop Client and Mobile Client, allowing for efficient video conferences. Figure 2-3 Huawei's full-HD video phone 8950 2.2 Added Flexibility for Mobile Work Styles Mobile Client enables users on the move to access office communications applications conveniently and securely, without compromising information security thanks to data encryption. With Mobile Client, users can: Place or answer calls and initiate conferences, saving on call fees and reducing mobile office costs. Search the corporate directory for desired contacts and view detailed information and current status of these contacts. Share rich media information, including audio clips, video clips, pictures, and doodles. Join a conference remotely and view content shared on Desktop Client, ensuring that they do not miss any important conferences. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd. 10 Huawei Enterprise Communications Solution Overview Contents Figure 2-4 Mobile Work Styles With Mobile Client 2.3 Comprehensive Redundancy and Protection for High Security and Reliability Five Protection Approaches for Uninterrupted Communication Local two-node cluster for redundancy N+1 cluster for load balancing Remote dual-center and tri-center disaster recovery for call control Voice regeneration capabilities provided by branch gateways Local switching for analog users Multi-level Protection for Secure Communication End-to-end signaling, media, and data encryption Multiple user authentication and authorization mechanisms, ensuring that only authorized users can access the system Directory access rights control, protecting sensitive user information 2.4 Openness and Convergence Make Businesses More Agile The Huawei EC system is an open platform with standard software development kit (SDK) interfaces, allowing customers to tailor user interfaces and integrate communications capabilities into their business processes. After integration, when users are going through business processes, they can directly send messages, query the corporate directory and user Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd. 11 Huawei Enterprise Communications Solution Overview Contents status, initiate calls or conferences, and conduct other communications tasks. This approach accelerates business processing, increases efficiency, and improves business performance. In addition, EC can be interconnected with a third-party system such as Microsoft Lync for extending voice, video, and multimedia capabilities. Figure 2-5 Integration with Outlook 2.5 Intelligent and Easy Management Reduces O&M Costs Lightweight platform simplifies deployment Easy installation deployment and unified service provisioning enable quick project delivery, helping enterprises reduce the time to market of new services. Unified management makes maintenance easier The Web-based management tool with graphical user interface (GUI) helps centrally manage and monitor all equipment across the entire communications network. This helps enterprises slash network management costs by over 70%, greatly reducing the operating expense (OPEX) for enterprises. Smooth expansion protects customer investment Based on the professional system architecture and highly reliable software platform, Huawei EC supports smooth service expansion by utilizing clustering and virtualization deployment, facilitating enterprises' rapid business development. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd. 12 Huawei Enterprise Communications Solution Overview 3 3 Component Introduction Component Introduction The EC solution consists of five layers: terminal and access, call management, service application, management and maintenance, and security protection. At each layer, Huawei provides a rich portfolio of products that can adapt to all enterprises, large and small. Figure 3-1 Product Overall View Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 1 Huawei Enterprise Communications Solution Overview 3 Component Introduction 3.2 Video Phone 8950 Figure 3-2 Phone Appearance Huawei video phone 8950 is a smart video phone that neatly integrates voice, video, and UC applications. It provides secure, HD, concise, and smooth video communication experience and improves collaboration capabilities of enterprises. Video phone 8950 uses dual speakers to deliver high-fidelity, CD-quality voice experience. It is equipped with a 2.0-megapixel HD camera whose shooting angle can be adjusted, enabling users to enjoy HD video experience. Video phone 8950 provides an 8'' In-Plane Switching (IPS) high-sensitivity multi-touch capacitive touchscreen at a resolution of 1280 x 800 pixels, enabling highly efficient screen operations. Video phone 8950 runs the Android operating system and has multiple built-in applications. You can install required applications depending on your needs. Features Hi-Fi and Pure Voice Quality Adopts hi-fi dual-speaker design, providing perfect voice experience. Supports 48 kHz full-band voice codec, enabling users to enjoy CD-quality voice experience. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 2 Huawei Enterprise Communications Solution Overview 3 Component Introduction High Security and Brilliant Video 2.0-megapixel HD camera whose shooting angle can be adjusted, helping capture image details Telepresence collaboration and HD conference experience Physical block of the camera to protect personal privacy Support for TLS/SRTP encryption to ensure communication security HD and Multi-Touch 8" IPS high-sensitive multi-touch touchscreen at a resolution of 1280 x 800 pixels, delivering HD image details A super wide angle of 178°, enabling broader image scope and clearer images High Efficiency and Exquisite UI Provides a touchscreen with a user-friendly interface, enabling high efficient screen operations. Allows users to create or join a conference by one click, enabling them to enjoy simplified conference control. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 3 Huawei Enterprise Communications Solution Overview 3 Component Introduction Adopts flattened UI design to provide exquisite UIs, delivering enjoyable experience. Functions Type Item Video phone 8950 Protocol Network Protocol TCP/IP, SIP, SDP, UDP, RTP, RTCP, DHCP, DNS, HTTP, HTTPS, SNTP, XCAP Audio features Audio codec G.711a/G.711μ/G.729ab/G.722/iLBC/Opus, compatible with G.729/G.729a/G.729b Audio features DTMF: Inband/RFC2833 Acoustic echo cancellation (AEC) Automatic Gain Control (AGC) Audio Jitter Buffer (AJB) Automatic Noise Restraint (ANR) Comfort Noise Generation (CNG) Hearing Aid Compatibility (HAC) Packet Loss Concealment (PLC) Voice Activity Detection (VAD) Sidetone cancelation Voice Quality Monitoring (VQM) Buzz cancellation Video features Issue 01 (2016-06-30) Camera 1080p, adjustable shooting angle (-25 degrees to +15 degrees relative to the screen Video codec H.264 MP/BP Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 4 Huawei Enterprise Communications Solution Overview Type 3 Component Introduction Item Video phone 8950 Video resolution QVGA (320 x 240 pixels) CIF (352 x 288 pixels) VGA (640 x 480 pixels) 4CIF (704 x 576 pixels) 720p (1280 x 720 pixels) 1080p (1920 x 1080 pixels) Video display PIP Full-screen display of the peer party Local video preview Video features Contact Support for a maximum of 1000 records and allow for users to import, export, and query contacts Multiple languages Display languages: Simplified and traditional Chinese, English, Portuguese, Spanish, French, Arabic, Hungarian, German, Polish, Russian, and Turkish Input languages: Simplified and traditional Chinese, English, Portuguese, Spanish, French, and Arabic (Input methods can be installed) Ringtone settings Allow for users to select a ringtone (24 built-in ringtones) and import personalized ringtones Wallpaper settings Allow for users to select a wallpaper (20 built-in wallpapers) and import personalized wallpapers Local voice conference Support for 6-party conferences Support for conference control operations such as adding, muting, and deleting participants Video conference Multi-party video with UC clients and telepresence conference terminals Basic services Security features voice Call waiting, call hold, call transfer, call forward, do-notdisturb (DND), call deflection, advanced secretary service, call park, pickup, group pickup, hotline, busy lamp field (BLF), distinctive ring, automatic callback, voice mailbox, abbreviated dialing, audio paging, hunt group, password-based call barring, emergency call, and calling line identification presentation (CLIP) Android-based features Built-in applications: calculator, calendar, clock, email, gallery, browser, and search Signaling media encryption TLS and Access security SRTP (AES 128) 802.1x (EAP-MD5) 802.1x (EAP-TLS) Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 5 Huawei Enterprise Communications Solution Overview Type 3 Component Introduction Item Video phone 8950 Management security HTTPS Certificate security Compliance with X.509 Specifications Type Video phone 8950 Touchscreen 8", 1280 x 800 pixels, and IPS multi-touch touchscreen LED MWI, mute, speaker, camera, and lock LEDs Physical switch camera Physical block of the camera Angle adjustment 55 degrees to 80 degrees Network port Two GE ports: 10/100/1000 Mbit/s adaptive and support for VLAN configuration Wi-Fi IEEE 802.11 a/b/g/n USB 2.0 port USB2.0 ports for connecting to the flash disk, earphone, keyboard, or mouse USB camera port 1 USB camera port (applicable only to the USB camera delivered with the phone) Bluetooth Bluetooth headset Micro SD card slot 1 HDMI port One HDMI port that complies with the HDMI 1.4 standard Handset port RJ-9 Headset port 3.5 mm Operating system Android 4.2.2 PoE Supported Power adapter Input: 100–240 V AC Output: 12 V DC, 2 A Support for Chinese, European, British, American, Australian, Brazilian, and Saudi Arabian standards Typical consumption Issue 01 (2016-06-30) power 12 W Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 6 Huawei Enterprise Communications Solution Overview 3 Component Introduction 3.3 IP Phone 7900 Series Figure 3-3 IP Phone 7910 Figure 3-4 IP Phone 7950 Figure 3-5 Expansion Module 7903X Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 7 Huawei Enterprise Communications Solution Overview 3 Component Introduction Figure 3-6 IP Phone 7950 With Expansion Module 7903X Huawei IP phone 7900 series is a next-generation high-quality IP phone with incredibly thin design. It features full-band HD voice quality, a true-color LCD screen, and abundant interfaces such as Gigabit Ethernet and Bluetooth headset interfaces. With innovative design, IP phone 7900 series greatly impresses users with simple, efficient, user-friendly, and intuitive operation experience. Huawei IP phone 7900 series include IP phone 7910 (mainstream business IP phone), IP phone 7950 (high-end business IP phone), and expansion module 7903X . Features Incredibly Thin Design IP phone 7900 series ushers in an era of simple and stylish work style. Compared with traditional clumsy IP phones, IP phone 7900 series offers a neat and trendy experience with its sleek, state-of-the-art design. IP phone 7900 series adopts an elegant, ergonomic design for the phone handset and supports adjustable base angle, culminating in visual and tactile comfort. Full-Band HD Voice Quality Issue 01 (2016-06-30) Uses Opus full-band voice codec and supports a sampling rate of up to 48 kHz. Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 8 Huawei Enterprise Communications Solution Overview 3 Component Introduction Innovates the speaker box design to achieve full-band HD voice quality and perfect reproduction of high-fidelity sound. True-Color LCD Screen IP phone 7950 is equipped with a 5" true-color LCD screen, and IP phone 7910 is equipped with a 2.83" color screen, enabling more smooth control with cooperation of keys on the phone. Expansion module 7903X expansion modules can be configured to provide diverse functions such as speed dial, phone lock, sleep, directory grouping, and graphic labels via 5" LCD screens, enhancing user experience and office efficiency. Abundant Interfaces Gigabit Ethernet access, enjoying limitless space Bluetooth headset, enabling more convenient office work USB port, enabling easy connection to headsets or storage devices Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 9 Huawei Enterprise Communications Solution Overview 3 Component Introduction Multi-Terminal Consistent Experience IP phone 7900 series adopts the same design style and UI as other Huawei UC clients to ensure consistent and comfortable user experience. Convenient Management and Maintenance An IP phone 7900 series provides a web management system. Users can log in to the web management system to configure the IP phone. Users can bulk deploy, configure, and upgrade IP phones on eSight. Functions Type Item 7910 Protocol Network protocol TCP/IP, SIP, SDP, UDP, RTP, RTCP, DHCP, DNS, PPPoE, HTTP, HTTPS, SNTP, XCAP IP phone features Multi-line 6 12 Account 3 6 Audio codec G.711a/G.711μ/G.722/G.722.1/G.722.2/G.729AB/iLBC/Opus /AAC-LD Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 7950 10 Huawei Enterprise Communications Solution Overview Type 3 Component Introduction Item 7910 Audio features DTMF: Inband/RFC2833 7950 Anti-clipping (ACLP) Acoustic echo cancellation (AEC) Automatic Gain Control (AGC) Audio Jitter Buffer (AJB) Automatic Noise Restraint (ANR) Comfort Noise Generation (CNG) Hearing Aid Compatibility (HAC) Packet Loss Concealment (PLC) Voice Activity Detection (VAD) Sidetone cancelation Voice Quality Monitoring (VQM) Buzz cancellation Call record 100 dialed call records, 100 answered call records, and 100 missed call records Missed call notification Contact Support for a maximum of 1000 records and allow for users to import, export, and query contacts Multiple languages Display languages: Simplified and traditional Chinese, English, Portuguese, Spanish, French, Arabic, Hungarian, German, Polish, Russian, Polish, Hungarian, and Turkish Input languages: Simplified and traditional Chinese, English, Portuguese, Spanish, French, Arabic, Polish, Hungarian, and Russian Service applicatio ns Issue 01 (2016-06-30) Ringtone settings Allow for users to select a ringtone (10 default ringtones) and import personalized ringtones Wallpaper settings Allow for users to select a wallpaper (12 built-in wallpapers) and import personalized wallpapers Local conference 6-party voice conferences Participant status presence Support for conference control operations such as adding, muting, and deleting participants Basic voice services Call waiting, call hold, call transfer, call forward, do-not-disturb (DND), call deflection, advanced secretary service, call park, pickup, group pickup, busy lamp field (BLF), distinctive ring, automatic callback, voice mailbox, abbreviated dialing, audio paging, hunt group, password-based call barring, and emergency call Corporate directory Allow for users to query contacts, directly dial phone numbers of contacts, and add contacts to the local directory Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 11 Huawei Enterprise Communications Solution Overview Type 3 Component Introduction Item 7910 7950 Name and departmen t display Display of the peer party's name, department, and phone number for incoming and outgoing calls Profile picture display Display of the peer party's profile picture for incoming and outgoing calls IP phone linkage Call control and status synchronization using desktop client Call recording Recording during voice calls Instant conference Users can initiate instant conferences through the conference button on IP phones. Group conference Users can initiate a voice conference with all contacts in a contact group. Recordings are stored on the server. Users can start or stop recording on IP phones. Specifications Table 3-1 IP phone 7900 series Specifications Type 7910 7950 LCD screen 2.83", 320 x 240 pixels, 260,000 colors, and color screen 5", 800 x 480 pixels, 16 million colors, and color screen LED Line, Message Waiting Indicator (MWI), Mute, Speaker, Call History, Headset, and programmable button LEDs Angle adjustment Two angles adjustable Button Two line buttons Six line buttons Five navigation buttons: Up/Down/Left/Right/OK Five navigation Up/Down/Left/Right/OK Ten programmable buttons Four soft keys Four soft keys Four fixed feature buttons with LEDs: Speaker, Headset, Mute, and Call History Four fixed feature buttons with LEDs: Speaker, Headset, Mute, and Call History Seven fixed feature buttons without LEDs: Home, Message, Volume, Contact, Hold, Conference, and Call Transfer Issue 01 (2016-06-30) buttons: Five fixed feature buttons without LEDs: Home, Message, Volume, Contact, and Call Forward Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 12 Huawei Enterprise Communications Solution Overview 3 Component Introduction Type 7910 7950 Network port Two GE ports: 10/100/1000 Mbit/s adaptive and support for VLAN configuration Handset port RJ-9 Headset port RJ-9 RJ-9/USB PoE Class1 Class2 Power adapter Input: 100–240 AC V Output: 5 V DC, 2 A Power consumption About 3.84 W About 6.49 W Dimensions 103 mm x 231 mm × 208 mm 124 mm x 217 mm × 208 mm Weight About 0.85 kg About 0.9 kg Table 3-2 Expansion Module 7903X Specifications Type Specification Supported IP phone model IP phone 7950 LCD screen 5", 480 x 800 pixels, 16 million colors, and color screen Display language Chinese (simplified and traditional), English, Portuguese, Spanish, French, Arabic, Turkish, and Russian Number of buttons 20 programmable buttons and two page switching buttons Maximum number of pages 2 Maximum number programmable buttons 40 of Maximum number of expansion modules that can be cascaded 3 Programmable functions Speed dial, BLF, directory grouping, XML application, phone lock, sleep, call forward, pickup, group pickup, call park, DND, paging broadcast, and hunt group button Power adapter Input: 100–240 AC V Output: 5 V DC, 2 A Power consumption About 3 W Dimensions 67.5 mm x 209 mm × 130 mm Weight About 0.41 kg Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 13 Huawei Enterprise Communications Solution Overview 3 Component Introduction 3.4 Clients Figure 3-7 Desktop Client and Mobile Client Huawei EC solution soft clients include desktop client, mobile clients, web conference clients, and SoftConsole. The soft clients feature user-friendly UIs, flexible operations, and customizable UI elements. In addition, the clients provide omnimedia interaction applications such as text, voice, video, and pictures, meeting enterprises' requirements for improved office efficiency. Features Multi-Terminal Consistent Experience Desktop client and mobile client provide consistent UI style and service operation experience. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 14 Huawei Enterprise Communications Solution Overview 3 Component Introduction Progressive Communication User communication assisted by soft clients is progressive, from instant messaging, voice calling, video calling, to multimedia conferences. Users can switch between these services on a single terminal with just several mouse clicks. Anytime Anywhere Mobile Rich Media No matter where you are, you can communicate with others using voice, photos, or even video, enabling others to know site situations. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 15 Huawei Enterprise Communications Solution Overview 3 Component Introduction SoftConsole SoftConsole is an IP-based console client running on a PC. This product provides enterprise attendants with multiple agent services such as automatic call allocation, call queuing, call transfer, and night service. The ConsoleServer works with SoftConsole and U1911/U1960/U1980/U1981 to comprise the console system to provide console services. The ConsoleServer and SoftConsole can be deployed on the same server. A ConsoleServer can connect to a maximum of eight U1911s, U1960s, U1980s, or U1981s that can be deployed in active/standby mode. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 16 Huawei Enterprise Communications Solution Overview 3 Component Introduction Functions Type Item Desktop client Mobile client Protocol Network protocol SIP, SDP, RTP, HTTP, TCP, TLS, SRTP, HTTPS, and T.120 SIP, SDP, RTP, TCP, TLS, SRTP, HTTPS, and T.120 Operating system - Windows XP, Windows7, Windows8 and Windows 10 Android and iOS Audio features Audio codec G711u, G.711a, G.729ab, iLBC, and Opus Video features Video codec/resol ution H.263: SQCIF/QCIF/CIF/4CIF H.264(BP): QQVGA/QCIF/CIF/4CIF H.264(BP): SQCIF/QCIF/CIF/4CIF/QQ VGA/QVGA/VGA/720P Android-based phone: 4CIF mobile iPhone 5S or above: 4CIF Other mobile phones: CIF Video display PIP Multiple languages - Simplified Chinese, traditional Chinese, English, French, Polish, Portuguese, and Spanish Service features Audio and video calls VoIP call, CTD, switch between audio and video calls, call recording, and video recording VoIP call, CTD, switch between audio and video calls, and Bluetooth headsets History Call, IM, conference, system message, SMS message, and roaming message records Call, IM, conference, system message, and roaming message records Basic voice services Call waiting, call hold, call transfer, call forward, DND, call deflection, call park, pickup, group pickup, distinctive ring, automatic callback, clock, abbreviated dialing, and CLIP Call waiting, call hold, blind transfer, call forward, DND, call deflection, call park, pickup, group pickup, automatic callback, clock, abbreviated dialing, and CLIP UC services IM, rich media viewing, group, presence, scheduled conference, instant conference, voice conference, multimedia conference, corporate directory, personal directory, online and offline file transfer, SMS message, and system bulletin IM, rich media sending and viewing, group, presence, scheduled conference, instant conference, voice conference, multimedia conference, corporate directory, personal directory, and system bulletin Issue 01 (2016-06-30) Full-screen display of the peer party Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 17 Huawei Enterprise Communications Solution Overview 3 Component Introduction Type Item Desktop client Mobile client Security features Communic ation security TLS Local data encryption Local data such as the personal directory and personal information is encrypted using the AES-256 algorithm. SRTP (AES 128) Specifications Table 3-3 Specifications of Desktop Client and Mobile Client Type Specification IM An IM to send can contain a maximum of 1000 characters (including emoticons, each of which takes up 3 characters). The content (including pictures) to send in each IM cannot exceed 2.5 MB. Point-to-point file transfer The types of files that are forbidden to send are configurable. There is not default value. The maximum size of a file that can be transferred is configurable. The default value is 400 MB. Group A contact group supports a maximum of 500 users. A temporary group supports a maximum of 500 users. Conference recording The recording disk space must be greater than 300 MB. By default, both video images and voice are recorded. The recording is about 3 MB per minute. The recording is stored in the .wmv format. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 18 Huawei Enterprise Communications Solution Overview 3 Component Introduction 3.5 Integrated Access Device (IAD) Figure 3-8 Integrated Access Device (IAD) Huawei Integrated Access Device (IAD) is used in Huawei EC solutions to enable analog users to access IPT networks. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 19 Huawei Enterprise Communications Solution Overview 3 Component Introduction IAD implements smooth evolution from analog voice to VoIP. Legacy analog terminals can be used to minimize IPT network construction costs at the initial stage. Huawei provides a variety of IAD models that support 4 to 224 channels of analog users, which adapt to scenarios of different user capacities. Features Series Products Support for access of 4 to 224 channels of analog users, adapting to scenarios of different user capacities Desktop- and rack-based IADs, meeting deployment requirements of different customers Flexible Adaption to Multiple Solutions Used with Huawei EC solution or IMS/NGN, providing an analog user access solution High Voice Quality Comprehensive QoS mechanism and multiple voice codec formats, ensuring voice quality High Reliability Support for tri-homing, local switching, providing a highly reliable access solution Support for multiple encryption modes such as TLS and SRTP that are used to encrypt signaling and media streams respectively Multiple Management Modes Built-in web management system, providing a visual management interface Unified NMS, implementing bulk deployment and upgrade Typical Applications Huawei IAD is used with Huawei EC solution and can be applied to different scenarios such as SOHOs and small- and medium-sized branches to implement analog user access. Figure 3-9 Typical Application Network Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 20 Huawei Enterprise Communications Solution Overview 3 Component Introduction Specifications Specification IAD104H IAD132E(T) IAD196 IAD1224 User interface FXS 4 8–32 32–96 32–224 Physical interface WAN 1 1 1 1 LAN 1 3 2 2 Serial interface 1 1 1 1 SIP √ √ √ √ MGCP √ √ √ √ TLS × × √ √ SRTP × × √ √ Protocol Audio features G.711 (A-law and μ-law), G.729, VAD, CNG, PLC, EC (G.168), jitter buffer, gain control, anti-jitter delay, and threeway calling Fax features T.30 transparent transmission, T.38, and VBD transparent transmission Reliability Physical features Issue 01 (2016-06-30) Local switching × √ √ √ Tri-homing √ √ √ √ Dimensions (H x W x D) 36 MM x 234 mm x 170 mm 42 mm x 234 mm x 170 mm Standard 19-inch 1-U subrack of 44 mm x 442 mm x 310 mm Standard 19-inch 2-U subrack of 86.1 mm x 442 mm x 310 mm Power supply Input: 100– 240 V AC Output: 12 V DC Input: 100– 240 V AC AC: 100– 240 V DC: –48 V AC: 100– 240 V DC: –48 V Maximum power consumption 7.4 W 86 W 150 W 200 W Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 21 Huawei Enterprise Communications Solution Overview 3 Component Introduction 3.6 Unified Gateway U1900 Series Figure 3-10 Unified Gateway U1900 Series Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 22 Huawei Enterprise Communications Solution Overview 3 Component Introduction Huawei unified gateway U1900 series are core voice gateways developed by Huawei to provide professional EC solutions in work with Huawei's IP terminals and UC applications. U1900 series supports both narrowband and broadband services. A single subrack supports a maximum of 20,000 users. U1900 series can be connected to a carrier network or private network voice switch using a digital, analog, or SIP trunk and supports access of both analog and IP phones. U1900 series adopts modular design and is easy to install. Boards are hot swappable. Key modules such as the main control board, network port, and power module are deployed in redundancy mode, ensuring high reliability. U1900 series provides GUIs to simplify deployment and maintenance. Features High Integration, Abundant Functions Provides an impressive array of IPT services. Provides the built-in high-fidelity voice conference service and supports multiple conference modes. Supports the One Number Link You (ONLY) service, allowing users to answer calls anytime, anywhere. Provides the built-in voice mailbox service to ensure that no calls are missed.Supports extension of UC applications. Effective Control, Cost Reduction Number analysis, blacklist, and whitelist, helping precisely control the call range 32-level customized call rights, implementing multi-level control Password-based call barring, helping efficiently control call fees Intelligent routing, reducing enterprises' communication costs Quick Deployment, Easy Maintenance Quick deployment in one hour Unified NMS for efficient maintenance Built-in web management system for convenient operations Typical Applications Unified gateway U1900 series, as core voice gateways, provide call control services for network-wide users. A branch, depending on its user requirements, can use an U1900 series as the local voice access gateway to provide the local regeneration function. IP phones can be directly connected to the U1900 series, while analog phones and fax machines are connected to the U1900 series through IADs. The U1900 series can be connected to the PSTN using a narrowband or broadband trunk to implement voice calls between internal and external (such as users using mobile or fixed-line phones) users. In a UC application scenario, the enhanced communication suite (ECS) can also be deployed to provide a variety of UC services such as presence, instant messaging, and multimedia conferences, enriching communication channels and enhancing communication efficiency. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 23 Huawei Enterprise Communications Solution Overview 3 Component Introduction Figure 3-11 Typical Application Network Specifications Specification U1911 U1960 U1981 U1980 Maximum number of users supported by a single suite 100 (a maximum of 100 IP users or 64 local analog users) 1000 (a maximum of 1000 IP users or 192 local analog users) 20,000 (a maximum of 20,000 IP users or 160 local analog users) 10,000 Terminal type Analog phone, IP phone, video phone, desktop client, and mobile client Trunk port A maximum of 24 FXO ports, 12 E1 or T1 ports, and 8 BRI ports Signaling protocol SS7, R2, PRI, QSIG, SIP, and BRI Issue 01 (2016-06-30) A maximum of 72 FXO ports, 28 E1 or T1 ports, and 24 BRI ports A maximum of 60 FXO ports, 24 E1 or T1 ports, and 20 BRI ports Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 30E1、20T1 SS7, R2, PRI, QSIG, and SIP 24 Huawei Enterprise Communications Solution Overview 3 Component Introduction Specification U1911 Codec format G.711a/μ, G.729a/b/ab, G.722/G.722.1/G.722.2 iLBC, and G.711a/μ, G.729a/b, and iLBC Number of conference channels A maximum of 60 participants, 20 conferences, and 60 participants per conference A maximum of 260 participants, 120 conferences, and 60 participants per conference A maximum of 2000 participants, 660 conferences, and 360 participants per conference A maximum of 960 participants, 320 conferences, and 120 participants per conference Voice mailbox A maximum of 12 concurrent built-in voice mailbox channels A maximum of 30 concurrent built-in voice mailbox channels A maximum of 30 concurrent built-in voice mailbox channels Unsupported Built-in 16 GB SD card Built-in 16 GB SD card AC: 100–240 V, 50Hz/60Hz AC: 100–240 V, 50Hz/60Hz AC: 100–240 V, 50Hz/60Hz AC: 100–240 V, 50Hz/60Hz DC: –38.4 V to –60 V (typical value: –48 V) DC: –38.4 V to –60 V (typical value: –48 V) DC: –38.4 V to – 60 V (typical value: –48 V) Two power modules in 1+1 backup mode Two power modules in 1+1 backup mode DC: –38 V to – 75 V (typical value: –48 V and –60 V) Power supply U1960 U1981 U1980 Built-in 16 GB SD card Power modules in 2+1 redundancy mode Power consumption 150 W (full configuration) 220 W (full configuration) 220 W (full configuration) 400 W (full configuration) Dimensions (H x W x D) Standard inch subrack Standard inch subrack Standard 19-inch 2-U subrack Standard inch subrack 191-U 192-U 44 m x 442 mm x 310 mm 86.1 mm x 442 mm x 310 mm Weight 8 kg (full configuration) 10 kg (full configuration) Environment specification Temperature 442mm x 310mm x 86.1mm 10 kg (full configuration) 196-U 264 mm x 436 mm x 420 mm 31 kg to 32 kg Storage temperature: –40ºC to +70ºC Long-term operating temperature: 0ºC to 45ºC Short-term operating temperature: –5ºC to +55ºC Operating humidity: 5% to 95% RH (non-condensing) The operating environment should take dustproof measures. The concentration of particulate matters in the air must be less than 180 milligrams per cubic. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 25 Huawei Enterprise Communications Solution Overview 3 Component Introduction Specification U1911 U1960 U1981 U1980 System reliability >=99.995% Maintainabilit y Centralized or remote device management, log management, resource management, and alarm management. >=99.999% (MTBF: 30 years) 3.7 Unified Session Manager (USM) Figure 3-12 USM In the EC solution, the Unified Session Manager (USM) is a call and media processing platform that provides IPT services for enterprise customers. It adopts software-only design and can be installed on a universal server or VM. The highly integrated USM enhances service performance and reliability. User registration, session control, and call routing Soft media for implementing real-time audio codec and voice conferences Broadband network call access Announcement playing, digit collection, conferencing, and IPT services for IP-based voice communication solutions Developed on carrier-class software and hardware platforms, the USM supports flexible networking modes, meeting communication requirements of enterprises in different industries and scales. The USM significantly improves enterprise communication efficiency while cutting down on operating expenses (OPEXs). Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 26 Huawei Enterprise Communications Solution Overview 3 Component Introduction Features Abundant Services Provides voice conferencing services and can integrate with the Meeting MS in the UC conferencing system to provide video and data conferencing functions and integrate with the telepresence conferencing system to provide the convergent conferencing function. Integrates with the unified messaging system to provide voice mailbox and fax mailbox functions. Provides CDRs that can be invoked by third-party billing systems. Supports a wide range of voice codec formats such as G.711a/μ, G.729ab, G.722, G.722.1, G.722.2, AMR-NB, and iLBC. Powerful and Flexible Networking Capability Provides SIP trunks that can be used to connect to IP PBXs. Supports connection to the PSTN using a trunk gateway. High Reliability Networking reliability: Allows servers to be deployed in active/standby and remote disaster recovery (DR) modes. Established calls are not interrupted during the active/standby switchover. Software reliability: Adopts the layered modular design, providing superb protection, error tolerance, and fault detection capabilities. System overload control: Provides significant control mechanisms such as 4-level overload control and CPU flow control. High Security Provides multiple toll fraud prevention mechanisms to effectively prevent toll fraud. Supports signaling encryption using TLS and media stream encryption using SRTP. Provides strict data protection mechanisms. Smooth Capacity Expansion The USM can be deployed in cluster mode to support a maximum of 400,000 terminals (IP phones and soft clients). The USM servers work in load balancing mode. Media servers can be flexibly added to expand media resources. Convenient Management and Maintenance The USM provides a web management system. Users can log in to the web management system to configure and maintain the USM and view the USM server status. The USM provides the LMT tool. Users can use the LMT to collect logs and trace signaling, helping quickly locate faults. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 27 Huawei Enterprise Communications Solution Overview 3 Component Introduction 3.8 Enhanced Communications Suite (ECS) Figure 3-13 Enhanced Communications Suite (ECS) Integrates voice, data, video, and service streams to allow any terminal to securely access the service platform at any time from any place, meeting all-dimensional application requirements such as enterprise VoIP, mobile office, and office collaboration. Mobile, videoenabled, and collaborative communication applications transform the enterprise communication model from cost-saving to service process integration, promoting business agility. Features Supports a maximum of 400,000 UC users and two-node cluster deployment, proving a high-reliability solution. Flexibly switches among instant messaging, voice calling, video calling, and multimedia conference services by simply one click, delivering smooth user experience brought by progressive communication. Moves your video with just few taps, enabling face-to-face-like and more direct communication. Supports asynchronous browsing that enables participants to freely browse any page different from the one that the speaker is sharing, implementing highly efficient conference collaboration. Typical Applications The eServer provides functions such as UC soft client registration authentication, instant messaging, presence, and group. The MAA provides the mobile client access function. When mobile client initiates a registration request, the MAA first forwards the registration request to the AppAgent. The AppAgent judges whether the UC account has the mobile client rights. If the UC Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 28 Huawei Enterprise Communications Solution Overview 3 Component Introduction account has the mobile client rights, the MAA forwards the registration request to the eServer for authentication. The UMServer provides the offline file transfer function for desktop client and rich media (such as pictures, audio clips, and video clips) transfer function for mobile client. The Meeting MS is a multimedia conference server. When working with an video phone 8950 or a client, the Meeting MS can provide video conference functions. In a UC solution, the Meeting MS can also provide data conference functions, such as content sharing and asynchronous browsing. The AppAgent can function as one of the IPT components and provides the corporate directory function. In addition, the AppAgent can function as the open interface to integrate third-party systems or perform secondary development. Figure 3-14 Typical Application Network Specifications Specification Parameter (co-deployed on the same server, Windows/Linux) Number of UC users 1000 UC users and 300 mobile clients Maximum number of concurrent multimedia conferences 100 channels Directory capacity 3000 records Note: The eServer, MAA, Meeting MS, BMU, AppAgent, database, and UMServer are deployed on the same server. For details about specifications of other servers, see Planning and Design in the EC Product Documentation. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 29 Huawei Enterprise Communications Solution Overview 3 Component Introduction 3.9 Unified Messaging System (UMS) Figure 3-15 Unified Messaging System (UMS) In the EC solution, the UMS includes Huawei UMS and Movius UMS. Huawei UMS, as a key component in the EC solution, is a secure, intelligent, highperformance, and multi-channel unified messaging system that provides voice and fax mailbox functions. Features Allows users to customize IVR announcements and greetings. Allows users to forward messages through phones or web pages and send a message to contacts in a group at a time, and supports different message retrieval modes. Supports automatic message backup to enhance security. Automatically deletes historical messages to enhance system resource usage. For more functions of Huawei UMS, see the Huawei UMS Product Description delivered with the product. Typical Applications The UMS server connects to the USM or the U1900 series through the SIP protocol to provide voice and fax mailbox services. After an SMS gateway and email server are deployed, the UMS notifies users of new messages through SMS messages or emails. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 30 Huawei Enterprise Communications Solution Overview 3 Component Introduction Figure 3-16 Typical Application Network Specifications Specification Huawei UMS Maximum number of voice mailbox users 8000 Maximum number of fax mailbox users 8000 Maximum number of concurrent voice mailbox users 400 Maximum number of concurrent fax mailbox users 200 Encryption Encrypted storage of voice and fax messages using TLS/SRTP Deployment mode Single-node system or two-node cluster Multi-language voice announcements Simplified Chinese, English, (Brazil), and Spanish (Mexico) Portuguese 3.10 Enterprise Meeting Portal (EMP) In the convergent communication solution, the Enterprise Meeting Portal (EMP) is a convergent conference portal that allows common users and system administrators to perform operations such as scheduling conferences and managing conference rooms. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 31 Huawei Enterprise Communications Solution Overview 3 Component Introduction Figure 3-17 Enterprise Meeting Portal (EMP) Features Unified Portal, Convenient Scheduling Allows users to schedule common and telepresence conference rooms as well as various online conferences such as voice, video, and data conferences in one-stop manner. Conference Agenda, Clear Information Displays the conference agenda by day, week, or month in a time axis, allowing users to clearly viewing conference information. Multiple Conference Joining Methods, Free Choice Allows participants to click links in emails to directly join conferences on soft clients and telepresence terminals. In addition, participants can dial the conference access code to join conferences. Typical Applications By integrating the IPT, UC, and telepresence networks, the EMP can provide enterprises with a unified portal for scheduling and managing conferences. The following figure shows a web conference network. For details about more networks, see 4 Networking Series. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 32 Huawei Enterprise Communications Solution Overview 3 Component Introduction Figure 3-18 Typical Application Network 3.11 Management and Maintenance Component Figure 3-19 Management and Maintenance Component Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 33 Huawei Enterprise Communications Solution Overview Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 3 Component Introduction 34 Huawei Enterprise Communications Solution Overview Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 3 Component Introduction 35 Huawei Enterprise Communications Solution Overview 3 Component Introduction The management and maintenance component in the EC solution provides a broad collection of functions such as personal operations, service management, and operation maintenance. The EC solution uses eSight, BMU, and LMT as management and maintenance platforms for enterprises. The USM, U1900 series, IAD, UMS, and IP phone all provide a web management system for service configuration and management. Features Component Description BMU Provides basic service management capabilities, including number management, service activation, data synchronization, and CDR query. eSight Provides device management capabilities, including topology management, alarm management, performance management, configuration management, security management, and unified upgrade. The following NEs can be connected to eSight: unified gateways, IADs, SBCs, IP phones, servers, routers, switches, and firewalls. LMT for U1900 series Provides the following functions for U1911/U1960/U1980/U1981: configuration management, alarm management, device status monitoring, signaling tracing, one-click fault data collection, patch management, upgrade, and log collection. USM LMT Provides the following functions: configuration management, alarm management, device status monitoring, signaling tracing, and fault data collection. Web management system for each component Allows the administrator to log in to the web management system of a component and perform service configuration and device management. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 36 Huawei Enterprise Communications Solution Overview 4 Networking Series 4 Networking Series The EC solution uses the USM and the U1900 SERIES seires unified way as core voice exchange devices and IAD as the VoIP/FoIP access gateway and provides a variety of devices such as service servers, IP phones, and SoftConsole. The EC solution supports multiple networking modes such as single-node, multi-node centralized, multi-node distributed, and large-capacity networking modes, meeting flexible networking requirements of small- and medium-sized enterprises. The networking diagrams involved in this document are only logical networking diagrams. For details about network area division and network access control in a security network, see Operation and Maintenance > Administrator Maintenance > Security Maintenance > Network Layer Security. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 37 Huawei Enterprise Communications Solution Overview 4 Networking Series 4.1 IPT Networks 4.1.1 Single-Node Network Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 38 Huawei Enterprise Communications Solution Overview Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 4 Networking Series 39 Huawei Enterprise Communications Solution Overview 4 Networking Series 4.1.2 Multi-Node Centralized Network Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 40 Huawei Enterprise Communications Solution Overview Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 4 Networking Series 41 Huawei Enterprise Communications Solution Overview 4 Networking Series 4.1.3 Multi-Node Distributed Network Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 42 Huawei Enterprise Communications Solution Overview Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 4 Networking Series 43 Huawei Enterprise Communications Solution Overview 4 Networking Series 4.1.4 U1900 Series Disaster Recovery Network Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 44 Huawei Enterprise Communications Solution Overview 4 Networking Series 4.2 UC Networks 4.2.1 Single-Node Network Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 45 Huawei Enterprise Communications Solution Overview Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 4 Networking Series 46 Huawei Enterprise Communications Solution Overview 4 Networking Series 4.2.2 Multi-Node Centralized Network Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 47 Huawei Enterprise Communications Solution Overview Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 4 Networking Series 48 Huawei Enterprise Communications Solution Overview 4 Networking Series 4.3 Convergent Conference Networks 4.3.1 Web Conference Network Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 49 Huawei Enterprise Communications Solution Overview 4 Networking Series 4.3.2 Web+VC Cascading Network Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 50 Huawei Enterprise Communications Solution Overview 4 Networking Series 4.3.3 IPT+VC Cascading Network Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 51 Huawei Enterprise Communications Solution Overview 4 Networking Series 4.3.4 UC+VC Multimedia Cascading Network Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 52 Huawei Enterprise Communications Solution Overview Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 4 Networking Series 53 Huawei Enterprise Communications Solution Overview 4 Networking Series 4.3.5 UC+VC MCU-Centric Network Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 54 Huawei Enterprise Communications Solution Overview Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 4 Networking Series 55 Huawei Enterprise Communications Solution Overview 5 Key Features 5 Key Features 5.1 IPT Features (U1900 SERIES) This topic describes IPT features supported by the U1900 SERIES that functions as the call management device. Table 5-1 describes the IPT features supported by the U1900 SERIES that functions as the call management device. For details about the features, see the EC Feature Guide. Table 5-1 Feature list Feature Description Voice Calling Voice calls can be made between PBX users and between PBX users and external users. Video Calling Video calls are made between two video phones. In a video call, both parties can watch the video of each other. Local Number Query Service The local number query feature allows users to obtain the numbers of the phones they are using by dialing the specified service number. Calling Line Identification Presentation With the calling line identification presentation (CLIP) feature, the calling number is displayed on the phone of the called party. Calling Name Identification Presentation Calling name identification presentation (CNIP) is a terminating service that provides the name associated with the calling number to the called party. Calling Line Identification Restriction The calling line identification restriction (CLIR) feature provides a supplementary service that prevents the number of the calling party from being presented to the called party. Calling Line Identification Restriction Override The calling line identification restriction override (CLIRO) feature allows a called party to view the number of the calling party even when the calling party enables the CLIR service. Connected Line Identification Presentation The connected line identification presentation (COLP) feature allows the calling party to receive the line identity of the connected party. Connected Name Identification Presentation The connected name identification presentation (CONP) feature provides the calling party with the name information of the called party. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 56 Huawei Enterprise Communications Solution Overview 5 Key Features Feature Description Calling/Conne cted Name Identification Restriction When a user has enabled the Calling/Connected Name Identification Restriction (CNIR) service, the name of this user is not displayed on the peer party's terminal. Distinctive Ring Tone The distinctive ring tone feature allows a user to set a specific ring tone for a calling party so that the calling party can be recognized by the ring tone when there is an incoming call from the calling party. Ringback Tone The ringback tone (RBT) feature provides a calling party with a pleasant melody or a greeting instead of an ordinary ring back tone when the calling party places a call to a user attached to an enterprise PBX. Call Hold The call hold feature enables a user to hold an ongoing call and resume it when necessary. Call Park The call hold feature allows a user to hold a call on one phone and resume the call on another phone within the office. If the user does not resume the call within the specified period, the call is released and the party on hold hears a busy tone. Multi-line Call The multi-line call feature allows users to process multiple incoming and outgoing calls on a single phone. However, only one voice call can be ongoing at the same time, and other calls are held. Call Waiting If a user activates the call waiting service and a third party makes a call to the user when the user is on a call, the user hears a prompt tone of the new call. Call Transfer The call transfer feature allows a user to press the transfer button to transfer an ongoing call to a third party and exit the call. Call Divert The call divert feature allows a user to press the forward button to forward a call to a third party without answering the call. Call Forwarding If a user activates the call forwarding service, incoming calls are automatically forwarded to a preset forward-to number without going through the user. Hotline The hotline feature enables a phone to automatically dial a preset hotline number upon off-hook. Pickup With the call pickup service, users can use a phone to answer a call that is ringing on another phone. Designated pickup: Users can use a phone to answer a call that is ringing on a specific phone. Group pickup: Users can use a phone to answer a call that is ringing on another phone in the same pickup group. Automatic Callback A user who dials an internal number that is busy or not answered, can register the automatic callback (ACB) service. When the called user is idle, the system automatically calls the calling and called parties. Abbreviated Dialing The abbreviated dialing feature allows users to call frequent contacts by dialing abbreviated numbers instead of long numbers. Abbreviated dialing reduces dialing time and makes numbers easy to remember. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 57 Huawei Enterprise Communications Solution Overview Feature Do Disturb 5 Key Features Description Not The do not disturb (DND) features allows the system to temporarily reject incoming calls for users. Barge The barge feature allows users to forcibly join an internal user's call and establish a three-way call. When a user barges into an ongoing call, the two parties of the call both hear the announcement indicating that a member joins the call. Forced Release The forced release feature allows an agent to forcibly end an ongoing call between two users. Privileged User The privileged user feature allows an agent to forcibly establish a call with an intra-office user who is in a call. One Number Link You The One Number Link You (ONLY) service enables users to bind several terminals to a single user number so that the users can answer incoming calls on any bound terminal. Three-way Calling The three-way calling service allows a user to make a call to a third party without ending the ongoing call and enable three-way calling. Alarm Clock A phone that has enabled the alarm clock service rings automatically at the preset time to remind the phone user. Music on Hold(MoH) The Music on Hold (MoH) feature allows the system to play waiting music to users when calls are being held, transferred, or parked. Absence The absence feature enables calling parties to hear an absence announcement when they place calls to users who have enabled the absence service. Multi-Number The multi-number service allows a single user to have multiple phone numbers, any of which can be dialed to reach the user. Audio Paging The audio paging feature uses telephony systems to send messages to all group users through unidirectional broadcast. Secretary Service The secretary service enables calls made to a manager to be forwarded to the secretary first. The secretary processes the call and forwards the call to the manager if necessary. Secretary Station Service With the secretary station feature, the system queues an incoming call when a secretary is busy, and forwards the call to the secretary when the secretary becomes idle. Advanced Secretary Service The advanced secretary service binds a line of a manager's phone to a line of a secretary's phone. The manager and secretary receive a call to the manager at the same time. The manager can answer the call directly. Alternatively, the secretary answers the call first and determines whether to forward the call to the manager. Emergency Call The emergency call feature allows IP phone users to call public safety answering points (PSAPs) when IP phones are locked, unregistered, or call-barred. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 58 Huawei Enterprise Communications Solution Overview 5 Key Features Feature Description Call Admission Control If the number of incoming and outgoing VoIP calls is too large, the network may be congested, therefore affecting voice quality. The system allows you to limit the number of concurrent incoming and outgoing calls that are made through SIP trunks to ensure proper use of bandwidth resources and better voice quality. Then, when the number of concurrent calls reach the preset upper limit, new incoming and outgoing VoIP calls will be rejected or routed to other trunks. Deactivation of All Services This feature allows a user to deactivate all the activated supplementary services. However, the user's service rights are not affected. Voice Service Password Change The voice service password is used in the outgoing call barring, passwordbased call barring, ONLY, deactivation of all services, and voice mailbox. It is recommended that the voice service password be changed periodically to improve the security of voice services. Busy Lamp Field (BLF) The Busy Lamp Field (BLF) feature allows users to subscribe to the status (idle, call in progress, ringing, or offline) of others using the programmable buttons on the IP phone. Before making a call, the calling party can know the status of the called party. If the called party is not idle, the calling party waits until the called party becomes idle. This helps improve the call success rate. Extension Mobility The extension mobility feature allows a user to use the same IP phone settings in a visited area as in the home area provided that the two areas belong to the same unified gateway. Since the user logs in to the IP phone in the visited area using the account of the home area's IP phone, the account on the IP phone of the home area is logged out. Service Level The service level feature enables management of service rights and basic call rights by service level. Trunk Preemption by User Rights Level This feature allows a higher-level user to preempt the trunk of a lowerlevel user to make an outgoing call when the system trunk resources are insufficient. This ensures the voice service requirements of high-level users. Call Rights Control This feature allows the system to determine whether to set up a call according to the call rights of the calling number and the call type of the called prefix when a user initiates a voice call. Therefore, call rights can be flexibly controlled based on actual needs. Blacklist and Whitelist Call Barring With the blacklist and whitelist call barring feature, calls are accepted or rejected based on call barring relationships configured in the blacklist and whitelist. Passwordbased Call Barring With the password-based call barring feature, users must enter a password when dialing specific phone numbers, such as a toll call number. The password-based call barring feature is classified into password-based, simple-card-number-based, and PIN-Code-based call barring. Anonymous Call Rejection When the system cannot obtain the phone number of a calling party, the call will be rejected and the called party's phone does not ring. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 59 Huawei Enterprise Communications Solution Overview 5 Key Features Feature Description Call-out Restriction Service If the call-out restriction service is enabled for a user, the user is prohibited from making specified types of outgoing calls. Hunt Group In an enterprise, employees in the same field can be added to a hunt group, with a group access code configured. When a user dials the access code of a hunt group, the system allocates the call to group members based on preset ringing policies. When a member answers the call, the system stops ringing. Simultaneous Ringing A user binds several numbers to a primary number. When the primary number is called, phones with the primary number and the bound numbers ring simultaneously. When the call is answered on any phone, other phones stop ringing. Sequential Ringing A user binds several numbers to a primary number. When the primary number is called, phones with the primary number and the bound numbers ring in sequence. When the call is answered on a ringing phone, other phones will no longer ring. Call Group When a user dials the access code of a call group, phones of all members in the group ring simultaneously. Members can pick up phones to join a meeting. By default, the instant hotline service is enabled for call group members who can talk with specific outer-group users after picking up phones. Direct Inward Dialing(DID) The Direct Inward Dialing (DID) feature enables external users to directly call intra-office users without being forwarded by calling the automatic switchboard. Automatic Switchboard The automatic switchboard service is also known as the interactive voice response (IVR) service. The IVR service forwards incoming calls to extension numbers. Voice Meeting A voice meeting enables participants to communicate with each other via voice. Users can create scheduled and instant voice meetings. Built-in Voice Mailbox U1911, U1960, and U1981 allow users to record, store, and retrieve voice messages, and customize greetings and prompt tones. Telephone Recording The telephone recording system enables the recording of multiple concurrent calls. Authorized users can query and play the recording files to implement supervision and monitor recording status. Unified Messaging The unified messaging service provides voice and fax mailbox services. After a user has subscribed to the unified messaging service, the user can access the system to retrieve voice or fax messages using a landline phone, fax machine, mobile phone, or PC from anywhere, at any time. Directory The system provides corporate and personal directory functions for users to conveniently search for contacts. Console A console system consists of the SoftConsole, ConsoleServer, and unified gateway. A contact center agent can log in to the SoftConsole using an account assigned by the ConsoleServer. After the account is authenticated by the ConsoleServer, the agent can use agent functions. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 60 Huawei Enterprise Communications Solution Overview 5 Key Features Feature Description Localization The system allows users to differentiate languages and signal tones based on their regions. 5.2 UC Features This topic describes UC features provided by the ECS. Table 5-2 describes the UC features provided by the ECS. For details about the features, see the EC Feature Guide. Table 5-2 Feature list Feature Description Instant Messaging After the instant messaging service is enabled, enterprise users can log in to their desktop client or mobile client to send instant messages (IMs). Including online message, offline message, sensitive word filtering, short message service (SMS), rich media message, file transfer, unread message notification, message notification, IM history. The SMS feature is available only if the enterprise deploys an SMS access gateway and performs independent software vendor (ISV) development to interwork the SMS access gateway with the Huawei UC system. Group Specific contacts can be added to a group to facilitate group discussion, message broadcast, and group file sharing. Presence Users can check the status of contacts on IP phones and soft terminals and choose an appropriate communication mode, enhancing office efficiency. Collaborative Conference The system provides a variety of sharing and interactive functions, including desktop sharing, e-whiteboard, document sharing, media sharing, text chat, and poll, to achieve efficient communication and collaboration. IP Phone Linkage Users can link desktop client and IP phones to facilitate communication. With IP phone linkage, users can use desktop client to make, answer, reject, hang up, hold, unhold, and deflect a call on IP phones. Work Community Work community is a social networking service provided by mobile client for enterprises. Colleagues within an enterprise can post text messages and pictures in the work community. Users can comment on or "like" photos posted by friends. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 61 Huawei Enterprise Communications Solution Overview 5 Key Features 5.3 Convergent Conference Feature A convergent conference neatly combines convergence of audio, video, and data services, enhancing enterprises' communication and collaboration capabilities and providing customers with superb conference experience. The convergent conference feature of the EC solution allows multiple terminals (including desktop client, mobile client, IP phone, video phone, telepresence endpoint, and HD videoconferencing terminal) to access a conference at the same time. The convergent conference implements convergence of media, convergence of desktop, mobile, and telepresence conferences, and convergence of multiple terminals. The convergent conference feature provides the following functions: To hold an important conference, the moderator can schedule a video conference. Enterprise employees can join the conference using their PCs. To hold a routine communication or training conference, the moderator can schedule a desktop conference without occupying telepresence conferences. Employees on the go can use their PCs or other mobile terminals to join conferences conveniently. For details about the features, see the EC Feature Guide. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 62 Huawei Enterprise Communications Solution Overview 6 Reliability 6 Reliability The EC solution adopts significant reliability mechanisms from servers to terminals, ensuring reliable service operations. 6.1 Reliability Panorama Different components in EC solution use different reliability approaches. The following tables list the reliability approaches taken by different components on EC solution. The actual reliability approaches depend on the enterprise's user capacity and reliability requirements. Table 6-1 Voice reliability Two-Node Cluster Component Disaster Recovery Local Regener ation PowerOff Survival MultiHoming √ means supported, × means not supported, N/A means irrelevant. U1980 √ √ √ × N/A U1911/U1960/ U1981 √ √ √ √ N/A Either local two-node clustering or remote disaster recovery can be deployed for the gateways. After an active/standby switching of the gateways for disaster recovery, services can be configured on the standby gateway through the BMU. However, gateway data synchronization is unidirectional, which is only from the active gateway to the standby gateway. As a result, when the active gateway recovers, services configured on the standby gateway become invalid. USM Processes of every two servers are deployed in active/standby mode. IP Phone N/A N/A N/A N/A √ Desktop client N/A N/A N/A N/A √ Mobile client N/A N/A N/A N/A √ Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 63 Huawei Enterprise Communications Solution Overview 6 Reliability Component Two-Node Cluster Disaster Recovery Local Regener ation PowerOff Survival MultiHoming IAD104H N/A N/A N/A × √ IAD132E(T) N/A N/A N/A × √ IAD196/1224 N/A N/A N/A N/A √ Table 6-2 IPT application reliability Componen t TwoNode Cluster Disaster Recover y DR for Voice Switching Devices Restrictions and Remarks Movius UMS √ √ √ Supports multiple voice switching devices in a distributed network. Supports a maximum of 20 SIP links, including links with the voice switching devices and links with the mail server and SMS gateway. UMS V200R002 √ × √ Supports connection to a pair of active/standby voice switching devices. Table 6-3 ECS reliability Compone nt Clust er TwoNode Clust er Disaster Recover y Gateway Disaster Recovery Restrictions and Remarks eServer √ √ × √ The eServer can be deployed in N+1 mode. Specifically speaking, N eServers are deployed in cluster mode, and one eServer functions as the backup server. The maximum value of N is 10. Meeting MS √ × √ N/A A trunking mode is used to enable remote disaster recovery. A maximum of eight Meeting MSs can be deployed in cluster mode. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 64 Huawei Enterprise Communications Solution Overview 6 Reliability Compone nt Clust er TwoNode Clust er Disaster Recover y Gateway Disaster Recovery Restrictions and Remarks AppAgent √ √ × √ The AppAgent can be deployed in N+1 mode. Specifically speaking, N AppAgents are deployed in cluster mode, and one AppAgent functions as the backup server. The maximum value of N is 10. MAA √ × × N/A A maximum of 12 MAAs can be deployed in cluster mode. UMServer √ × × N/A A maximum of eight UMServers can be deployed in cluster mode. Table 6-4 EMP reliability Component Two-Node Cluster Restrictions and Remarks EMP √ Supports 1+1 cold backup. Table 6-5 Management component reliability Compone nt TwoNode Cluster Disaster Recovery Restrictions and Remarks BMU √ × - eSight √ √ eSight supports local two-node clustering and remote disaster recovery. Either local two-node clustering or remote disaster recovery can be deployed. In the remote disaster recovery mode, the network bandwidth cannot be lower than 50 Mbit/s. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 65 Huawei Enterprise Communications Solution Overview 6 Reliability 6.2 Redundancy for Key U1900 SERIES Modules U1911/U1960/U1980/U1981 is an integral part of EC solution. A unified gateway uses two control boards for hot standby, multiple service boards and interface boards for load balancing, and multiple network ports and power modules for redundancy backup. Table 6-6 describes the redundancy backup for key modules on U1911/U1960/U1980/U1981. Table 6-6 Redundancy backup for key modules Redundancy Backup Approach U1911 U1960 U1980 U1981 Description Multiple MTU boards (media trunk resource boards) for load balancing √ √ - √ Multiple MTU boards are installed on the unified gateway. The system polls the MTU boards and selects an appropriate one for allocating resources. Multiple MRS boards (media resource boards) for load balancing - Multiple DTU boards (digital trunk interface boards) for load balancing - - √ - Multiple DTU boards loadbalance trunk interface resources. When a DTU board is faulty, the ongoing calls are affected and the available resources are reduced. The other DTU boards share the load to ensure a functional system. Two SCU boards (control boards) for hot standby × × - √ When the active SCU board is faulty, the standby SCU board automatically takes over services. The active/standby failover does not interrupt services and increases the mean time between failures (MTBF). Issue 01 (2016-06-30) When an MTU board is faulty, the ongoing calls are affected and the available resources are reduced. The other MTU boards share the load to ensure a functional system. - √ - Multiple working MRS boards load-balance resources. When an MRS board is faulty, the ongoing calls are affected and the available resources are reduced. The other MRS boards share the load to ensure a functional system. Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 66 Huawei Enterprise Communications Solution Overview 6 Reliability Redundancy Backup Approach U1911 U1960 U1980 U1981 Description Two SMCU boards (control boards) for hot standby - - √ - When the active SMCU board is faulty, the standby SMCU board automatically takes over services. The active/standby failover does not interrupt services and increases the mean time between failures (MTBF). Network port backup √ √ √ √ In single-network-port mode, network ports 0 and 1 provide the same functions, and they back up each other. Two power modules for current equalization and power backup × √ √ √ In normal situations, each power module provides current for load balancing. If a power module stops working, the other power module automatically takes over its services to ensure uninterruptible power supply. Issue 01 (2016-06-30) One power module 2+1 power module s for current equaliz ation and power backup Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd When two power modules are configured, they must be both DC or AC. The power modules are hot swappable. 67 Huawei Enterprise Communications Solution Overview 6 Reliability 6.3 Two-Node Cluster and Multi-Node Cluster EC solution supports two-node clusters for core gateways, some service servers, and some databases. When the active node in a two-node cluster fails due to a hardware or network fault, the standby node automatically takes over services. In addition, EC solution supports clustering of eServers, MAAs, Meeting MSs, UMServers, and recording servers. Typical Two-Node Cluster Networking Figure 6-1 U1900 series two-node cluster Two-Node Cluster Mechanism Table 6-7 USM two-node cluster backup Two-node cluster backup mechanism The same process is deployed on the active and standby servers to implement active/standby service processes. Service recovery mechanism Two servers are deployed in active/standby mode. When one server is faulty, the other server automatically becomes the active server after taking over services. When the faulty server recovers, the server functions as the standby server. Impact on services The active/standby switchover time is less than 5s. The voice calls or conferences are not interrupted during the switchover. The active or standby server is not specified. The server that first starts is the active server. In normal conditions, the active server provides services. When the active server is faulty, the internal arbitration process automatically starts the other server to take over the services. The active and standby servers share the same database and provide the same signaling IP address for external systems. In this case, configured or registered services are not impacted. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 68 Huawei Enterprise Communications Solution Overview 6 Reliability Table 6-8 U1911/U1960/U1980/U1981 two-node cluster backup mechanisms Two-Node cluster mechanism Active/Standby redundancy Two unified gateways are deployed at the headquarters as the active and standby nodes. The active and standby nodes use a heartbeat mechanism to constantly check each other's status. NOTE The active and standby nodes must use the same unified gateway model. When the active and standby nodes are running correctly, all users register with the active node. The active node processes all user requests and synchronizes user registration and configuration data to the standby node in real time. When the active node fails, the standby node takes over all services from the active node and processes all user requests. If the trunk gateway is not deployed, the active and standby nodes both connect to the PSTN. When the active node fails, configurations are required on the PSTN to set up trunk channels with the standby node, and the standby node then routes calls to the PSTN through trunks. All service servers support active/standby switchover of the gateways. This means these service servers automatically connect to the standby node for service processing after a switching from the active node to the standby node. Service recovery mechanism After switching from the active node to the standby node due to an active node failure, the standby node processes all services. When detecting that the active node recovers, the standby node automatically switches services to the active node. Impact on services The switchover lasts about 2 minutes. During the switching, new calls cannot be initiated. Considering that terminal registration updates to the standby node, the maximum service interruption time is 2 minutes plus the duration of terminal registration updates. The calls that have been set up are not affected. NOTE The standby node is allowed to take over services for a maximum of 30 days. To avoid service unavailability, repair or replace the faulty node promptly. Issue 01 (2016-06-30) When the standby node takes over the services, data is not synchronized to the active node. After services are switched back to the active node, the active node synchronizes data to the standby node, and the data on the standby node will be overwritten. Before manual switchover, export data from the standby node and import the exported data to the active node so that the data that is generated on the standby node during the fault period will not be lost. Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 69 Huawei Enterprise Communications Solution Overview 6 Reliability Table 6-9 BMU/eServer/AppAgent/DB two-node cluster backup mechanisms Two-Node cluster mechanism Serves are deployed in VCS two-node cluster (A-S) mode, which applies to deployment scenarios on Linux. In normal conditions, the active node works in active state and the standby node in standby state. The active node processes all services. When the active node is faulty, active/standby switchover takes place and the standby node takes over the services. Data is saved in the disk array. After active/standby switching, the standby node connects to the disk array for obtaining data. Therefore, it is unnecessary for the active node to synchronize data to the standby node. The Oracle database could be deployed in Real Application Clusters (RAC) mode or VCS mode. Service recovery mechanism After the active/standby switchover, the original standby node becomes an active one. The original active node functions as a standby one even if it recovers. Services are not switched back. Impact on services The switchover lasts about 5 minutes. Services are temporarily interrupted during the switchover. Table 6-10 EMP two-node cluster backup mechanism Two-node cluster backup mechanism The EMP is deployed in VCS two-node cluster (A-S) mode and can be installed in a Linux operating system. In normal conditions, the active node is in online state, and the standby node is in offline state. The active node processes all services. When the active node is faulty, active/standby switchover takes place and the standby node takes over the services. Data synchronization between the active and standby GaussDB servers is implemented through transaction log synchronization between the two nodes. After synchronizing the transaction log from the active node, the standby node can update its own data based on the transaction log content to implement data synchronization with the active node. Service recovery mechanism After the active/standby switchover, the original standby node becomes an active one. The original active node functions as a standby one even if it recovers. Services are not switched back. Impact on services Services are temporarily interrupted during the switchover which lasts about 5 minutes. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 70 Huawei Enterprise Communications Solution Overview 6 Reliability Table 6-11 UMS two-node cluster backup mechanisms Two-Node cluster mechanism Active-standby HA two-node cluster In normal conditions, the active node works in active state and the standby node in standby state. The active node processes all services and synchronizes data to the standby node. When the active node is faulty, active/standby switching takes place and the standby node takes over the services. Service recovery mechanism After the active/standby switchover, the original standby node becomes an active one. The original active node functions as a standby one even if it recovers. Services are not switched back. Impact on services The switchover lasts about 2 minutes. Services are temporarily interrupted during the switchover. Clustering Table 6-12 Clustering solutions Component Clustering Solution eServer The eServer can be deployed in N+1 cluster mode (N ≤ 10). According to the user capacity, each eServer processes registration and services of some users. When an eServer is faulty, the other eServers take over the services of this faulty eServer. After an eServer takes over the services, the eServer becomes an active server. The faulty eServer runs as the standby server after it is recovered from the fault. On a Windows platform, eServer servers are deployed in an N cluster that supports load balancing without the backup function. AppAgent The AppAgent can be deployed in N+1 cluster mode (N ≤ 10). When an AppAgent server is faulty, the other AppAgent servers take over the services of this faulty AppAgent server. MAA A maximum of 12 MAAs can be deployed in cluster mode. When an MAA server is faulty, the other MAA servers take over the services of this faulty MAA server. UMServer A maximum of eight UMServers can be deployed in cluster mode. When a UMServer is faulty, the other UMServers take over the services of this faulty UMServer. Meeting MS A maximum of eight Meeting MSs can be deployed in cluster mode. When a Meeting MS is faulty, the other Meeting MSs take over the services of this faulty Meeting MS. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 71 Huawei Enterprise Communications Solution Overview Component Clustering Solution Movius UMS Clustering, with one or more external IP addresses. 6 Reliability When the Movius UMS cluster provides only one external IP address: If a UMS is faulty, services are automatically switched to another functional UMS. When the Movius UMS cluster provides multiple external IP addresses: Each UMS exchanges heartbeat messages with the unified gateway. If a UMS is faulty, the unified gateway automatically connects to other functional UMSs. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 72 Huawei Enterprise Communications Solution Overview 6 Reliability 6.4 Remote Disaster Recovery In the Huawei EC solution, core call management devices USM and U1911/U1960/U1980/U1981 support remote disaster recovery networks. Midsize and large enterprises with multiple branches can use such networking for better reliability. When devices in one place are faulty, devices in another place take over services to ensure service continuity. Remote Disaster Recovery for the USM Figure 6-2 shows the user registration process in disaster recovery scenarios. Figure 6-2 User registration process A indicates active, and S indicates standby. Disaster Recovery Mechanism for the USM Table 6-13 DR backup DR Network Description A-A On the A-A network, both sites are primary sites. They work in load Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 73 Huawei Enterprise Communications Solution Overview 6 Reliability DR Network Description A-S balancing mode. When one site is faulty, the other site takes over its services. On the A-S network, one of the two sites is the primary site and the other is the backup site. To register a number, you need to specify the primary and backup servers (that is, USMs) with which the number will be registered. On the A-S network, all numbers are registered with one USM. On the A-A network, two USMs are available for number registration. A-A-A A-A-S Among the three sites (named sites 1, 2, and 3) on the A-A-A network, each site works as the backup site of another site. Site 2 works as the backup site of site 1, site 3 works as the backup site of site 2, and site 1 works as the backup site of site 3. The A-A-S network comprises three sites. Two of them are primary sites that work in load balancing mode. Another site serves as the backup site. When either of the primary sites does not work, its services are automatically switched to the backup site. To register a number, you need to specify the primary and backup servers (that is, USMs) with which the number will be registered. On the A-A-A network, numbers are evenly registered with three USMs. On the A-A-S network, only two USMs are available for number registration. Service Recovery Mechanism for the USM In the USM disaster recovery scenario, if the active node is faulty, services are automatically switched to the standby node. When the active node recovers, terminals are re-registered with the active node after being restarted or arriving at the registration period. In this case, the active node takes over the services. Service Impact Due to USM Disaster Recovery Table 6-14 Impact on services Scenario Impact Ongoing point-to-point (P2P) call If SIP Session Timer is enabled for the IP phone, the call will be disconnected during the failover. Ongoing voice conference, data conference, or convergent conference The conference will be ended during the failover. Service activated for a terminal The service is still available after the failover. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 74 Huawei Enterprise Communications Solution Overview 6 Reliability Disaster Recovery for the U1900 Series Unified Gateway Figure 6-3 U1900 SERIES dual-center disaster recovery network Either the two-node cluster in active/standby mode or remote DR can be used for reliability networking of the unified gateway. Disaster Recovery Mechanism for the Unified Gateway Two central nodes are deployed in two places, and each central node has two unified gateways deployed. The central unified gateways in two central nodes work in active/standby mode, known as an active node and a standby node (the active and standby nodes must use the same gateway model). The active and standby nodes use a heartbeat mechanism to constantly check each other's status. The service servers are deployed at the central node where the active unified gateway resides. When the active and standby nodes are running correctly, all users register with the active node. The active node processes all user requests and synchronizes data to the standby node in real time. At least 1 Mbit/s bandwidth must be reserved for data synchronization, and the round trip time (RTT) must be shorter than 80 ms. When the active node fails, the standby node takes over all services from the active node and processes all user requests. A trunk gateway can be deployed for connecting to the PSTN. If the trunk gateway is not deployed, the active and standby nodes both connect to the PSTN. When the active and Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 75 Huawei Enterprise Communications Solution Overview 6 Reliability standby nodes are running correctly, the active node routes calls to the PSTN through trunks. When the active node fails, the standby node routes calls to the PSTN through trunks. Service Recovery Mechanism for the Unified Gateway After switching from the active node to the standby node due to an active node failure, the standby node processes all services. When the active node recovers, the following two situations may exist: Periodic check By default, the standby node checks the status of the active node at any time. When detecting that the active node recovers, the standby node automatically switches services to the active node. In addition, the automatic switching duration (maximum: 255 minutes) can be configured when necessary. If the automatic switching duration is configured and if the active node recovers after the preset automatic switching duration expires, the system does not automatically switch services back to the active node. Daily check The standby node checks whether the active node recovers at a specific time (default: 02:30:00) every day. When detecting that the active node recovers, the standby node automatically switches services to the active node. You can also manually switch services back to the active node when confirming that the active node recovers. When the standby node takes over the services, data is not synchronized to the active node. After services are switched back to the active node, the active node synchronizes data to the standby node, and the data on the standby node will be overwritten. Service Impact Due to Unified Gateway Disaster Recovery The switching lasts about 2 minutes. During the switching, new calls cannot be initiated. Services are interrupted for at most 4.5 minutes considering the terminals' registration update interval. Services are still available if the service servers are functional, and the service servers interact with the standby node. The switching has the following impacts: New services cannot be started for ongoing calls, for example, call hold. Ongoing voice conferences are interrupted. CDRs cannot be generated for ongoing calls or conferences. Ongoing message services are interrupted. Queues in the console system become invalid. SoftConsole disconnects from the ConsoleServer. Remote disaster recovery does not support redundancy backup of VMS message data, recording files, or voice files. Disaster Recovery for the Meeting MS In a trunking deployment mode, the MS at a node can take over services when a fault occurs at the MS on another node, implementing remote disaster recovery. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 76 Huawei Enterprise Communications Solution Overview 6 Reliability Disaster Recovery for the UMS The Movius UMS supports active-active remote disaster recovery. The two Movius UMSs at the active and standby nodes keep data synchronized in real time. The Movius UMS supports disaster recovery of the unified gateways, and vice versa. When a unified gateway is faulty, the UMS automatically connects to the functional unified gateway to receive services. In the remote disaster recovery network, ensure that the bandwidth for each UMS is greater than 15 Mbit/s. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 77 Huawei Enterprise Communications Solution Overview 6 Reliability 6.5 Local Regeneration As part of EC solution, the branch nodes (U1911/U1960/U1980/U1981 ) provide local regeneration functionality to ensure service continuity. In a network shown in Figure 6-1, all users at the headquarters and branches are registered with the U1900 series at the central node. The U1900 series at the central node can be deployed in two-node cluster or remote disaster recovery mode. If the U1900 series at the central node and the disaster recovery site are both faulty or the network connectivity is lost between the headquarters and branches, branch users cannot register with the U1900 series. At that time, the branch nodes can use the local regeneration function to provide basic telephony services for local IP and analog phone users. Users' dialing rules remain unchanged, but inter-branch calling using short numbers is unavailable. To call an internal user at another branch, others can dial the PSTN number of this user for connecting to this user through the PSTN. Figure 6-4 Local regeneration at branch nodes Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 78 Huawei Enterprise Communications Solution Overview 6 Reliability When an enterprise branch user (for example, an IP phone user) initiates a call to another branch user or an external PSTN user, the call request is routed to the branch node. The branch node then handles the call request and connects the call successfully. The same is true when an external PSTN user calls an enterprise branch user. In the local regeneration scenario, CDRs are generated at branch nodes. The CDRServer can obtain the CDRs from the branch nodes if they are connected. If an enterprise branch has its own automatic switchboard number, the branch's automatic switchboard service is available in the local regeneration scenario. If an enterprise has only one automatic switchboard number, the automatic switchboard service is available only at the node to which the automatic switchboard number belongs. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 79 Huawei Enterprise Communications Solution Overview 6 Reliability 6.6 IAD Network-Outage Local Switching and U1900 SERIES Power-Off Survival As part of EC solution, access gateways provide network-outage-triggered local switching and power-off survival functionality to ensure service continuity. When a branch disconnects from the headquarters gateway, an IAD access gateway at the branch enables local switching for phones under the IAD to call each other. When encountering a power outage, an U1911/U1960/U1981 access gateway enables power-off survival to ensure outgoing calls for some users. Figure 6-5 illustrates a network-outage local switching and power-off survival scenario. Figure 6-5 Network-outage local switching and power-off survival Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 80 Huawei Enterprise Communications Solution Overview 6 Reliability t_ipt_sltd_00030_01Table 6-15 describes network-outage local switching and power-off survival functionality. Table 6-15 Network-outage local switching and power-off survival Functi on Description Process (Using Data in Figure 6-5 as an Example) Applicable Product Model IAD networ koutage local switchi ng When network connectivity is lost between a local access gateway and the core gateway, the local access gateway enables network-outage local switching functionality. Phone users under the same local access gateway can then dial short numbers to communicate with each other. 1. The phone (phone number: 6000) of user A and the phone (phone number: 6001) of user B are connected to the local access gateway. A dials 6001, and B hears the ringing and answers the call. 2. User A dials 0 (an outgoing calling prefix) and 28983000 (a local phone number). This call is then routed to the called party through the trunk (phone number: 28981000), and 28981000 is displayed on the called party's phone. 3. A local user (phone number: 28983000) calls A through the trunk (phone number: 28981000). A's phone then rings, and A can answer the call. IAD132E(T) IAD196 IAD1224 U1900 SERIE S poweroff surviva l When a local access gateway is powered off, the relay built in the local access gateway is closed to physically connect FXS ports to FXO ports, which means that phones under FXS ports are directly connected to the PSTN. Users then can make outgoing calls through these FXS ports. 1. User A dials 0 (an outgoing calling prefix) and 28983000 (a local phone number). This call is then routed to the called party through the trunk (phone number: 28981000), and 28981000 is displayed on the called party's phone. 2. A local user (phone number: 28983000) calls A through the trunk (phone number: 28981000). A's phone then rings, and A can answer the call. U1911 U1960 U1981 Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 81 Huawei Enterprise Communications Solution Overview 6 Reliability 6.7 Terminal Reliability The terminals are reliable even in the case of active/standby switchover or disaster recovery thanks to redundant core call management device and service servers. They can automatically switch to functional gateways and servers for registration. Figure 6-6 Terminal multi-registration Table 6-16 Terminal multi-registration conditions Terminal Description IP phone IP phones support three SIP servers. In the active/standby switchover or local regeneration scenarios, IP phones register with the working SIP server to ensure their services. Analog phones under IADs IADs support three SIP servers. In the active/standby switchover or local regeneration scenarios, IADs register with the working SIP server to ensure the services of analog phones connected to these IADs. Desktop client Desktop client support four SIP servers. In the active/standby switchover or local regeneration scenarios, IPT services on logged-in clients are not impacted. Mobile client obile client support two SIP servers. In the active/standby switchover or local regeneration scenarios, IPT services on logged-in clients are not impacted. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 82 Huawei Enterprise Communications Solution Overview 7 Security 7 Security The EC solution orchestrates a security protection system from four layers and supports secure access, creating an end-to-end security environment where enterprise users can easily use UC services. 7.1 Terminal Access Security This topic describes the security of terminal access from intranet and extranet. Intranet Access Security IP phones are authenticated using 802.1x. UC soft terminals (Desktop client and mobile client) comply with the intranet access security policies deployed by the enterprise. Extranet Access Security An enterprise network is divided into two parts: demilitarized zone (DMZ) and enterprise intranet. These two parts belong to different network segments, between which an intranet firewall is deployed to isolate the two parts using network address translation (NAT). An extranet firewall is deployed at the edge of the enterprise network, and all terminals can access the DMZ only through this firewall. The session border controller (SBC) bridges the enterprise extranet and DMZ. It implements NAT traversal with the assistance of the extranet firewall. The communications data is encrypted before being transmitted over the public network. Encrypted transmission ensures data security. The EC supports access of desktop client, mobile client, web conference clients, and telepresence terminals from an extranet. For details about the access network, see 4 Networking Series. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 83 Huawei Enterprise Communications Solution Overview 7 Security 7.2 Communication Service Security In EC solution, service data, including voice, message, and video, is transmitted over a relatively open IP network. To avoid security issues, EC solution provides multiple service security management mechanisms. End-to-End Signaling and Media Encryption EC solution supports TLS-based encryption of signaling streams exchanged between terminal and servers, between terminals and call management device, between servers, and between servers and call management device. EC solution supports SRTP-based encryption of media streams to ensure the transmission security of voice and data. The signaling and media streams of the Meeting MS use the AES256 encryption algorithm, the key exchange algorithm uses the RSA 2048 or a later version, and the digest algorithm uses the SHA256 or a later version. The password for an desktop client and mobile client logging in to the eServer must be stored via the SHA256 irreversible encryption algorithm. Data such as the directory and personal information is encrypted via AES256 before storage. Service Interface Authentication EC solution provides comprehensive management interface security policies. The security management protocols based on strong authentication and encryption ensure confidentiality and integrity of management channels. EC solution also provides insecure protocols for customers to use in trusted networks, ensuring the flexibility of security mechanisms. Passwords are required before users invoke some interfaces between terminals and servers, between servers, or for accessing the BMU and USM web through web browsers. The USM provides the whitelist function. If the IP address of a server is not in the IP address whitelist of the USM, the server cannot access the USM. This ensures access security of core servers. Encrypted Storage and Transmission of Sensitive Data The access passwords used between terminals and servers and between servers are encrypted for storage. The passwords used for authentication between terminals and servers and between servers are encrypted for storage. The passwords used for joining data conferences are encrypted for storage. The access passwords used between terminals and servers and between servers are encrypted for transmission. Interfaces between the BMU or USM and web browsers and between the BMU and conference clients support HTTPS. Interfaces between the BMU and AD server support LDAPS. The CDR transmission channel between the CDRServer and the unified gateway can be encrypted using TLS. Password authentication is supported for connecting the unified gateway to the CDRServer. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 84 Huawei Enterprise Communications Solution Overview 7 Security The CDR transmission channel between the NFS CDR server and the UMS can be encrypted using FTPS. Sensitive data is stored in the access-controlled database or configuration file. Only the operating system administrator and the database accounts associated with applications are allowed to access the database or configuration file. Digital Certificate Security Strong passwords are used for encrypting and decrypting private key files of the digital certificate. The passwords are encrypted for storage. EC solution supports replacement of digital certificates. Enterprises can customize their passwords, apply for certificates from certificate authorities, and replace the default system certificates. The following interfaces use digital certificates for authentication: Web interface for a web browser to access the BMU and USM Interface for a conference client to access the Meeting MS Interface for a SoftConsole to access the ConsoleServer Service Rights Control EC solution can control call service rights on a per-user basis. Users' call rights can be configured based on their business scopes to avoid issues such as toll fraud and protect enterprise benefits. Toll Fraud Prevention Toll fraud is a severe communication security issue facing enterprises. The following toll fraud scenarios may exist: Someone may illegally obtain the administrator's account and password, and modify the service configuration and disable the CDR using the administrator's account and password obtained. Then, he or she can place toll calls. Someone can connect to a toll call number through the enterprise's automatic switchboard. An international toll call can be connected by routing the call from the enterprise's local gateway to the enterprise's international gateway. Someone who is not an enterprise's employee may illegally obtain an employee account and register with the enterprise's internal voice gateway to place toll calls. EC solution provides comprehensive security mechanisms to effectively prevent toll fraud in the preceding scenarios. The core gateways and servers are deployed on the enterprise intranet and isolated from the public network. The core gateways and servers are hardened, and unused ports and accounts are disabled. The two measures combine to mitigate the risks of system attacks. Complex passwords are supported. It is recommended that strong passwords be used for the administrator accounts and other key accounts, and such passwords be changed periodically to reduce the risks of obtaining accounts and passwords in an unauthorized manner. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 85 Huawei Enterprise Communications Solution Overview 7 Security Multiple rights control approaches are used to reduce the toll fraud risks. The approaches include controlling outgoing calls from the automatic switchboard, controlling outgoing calls routed through trunks, controlling user service rights, and limiting the duration and concurrence of toll calls. Users can be authenticated by IP address, password, IP address+password, or IP address segment to prevent unauthorized user registration. Whitelists and blacklists for management IP addresses can be configured. If the IP address of a maintenance terminal is not whitelisted, users cannot log in to U1911/U1960/U1980/U1981 through this maintenance terminal. The CDR server is provided for recording CDRs in real time. The recorded CDRs ensure traceable information in case of toll fraud. Directory Access Rights Control The administrator can classify employees into different levels and configure directory access policies for users of different levels. Sensitive Word Filter EC solution supports filtering of sensitive words. If an IM carries sensitive words defined in the system, the sensitive words are displayed as asterisks (*) at the Rx end. The administrator can set the sensitive words. IM and File Transfer Security The maximum characters that an IM contains can be limited. The text to send can contain a maximum of 1000 characters (including emoticons, each of which takes up 3 characters). The content (including pictures) to send in each IM cannot exceed 2.5 MB. Issue 01 (2016-06-30) The type and size of a file that can be transferred are configurable. − The types of files that are not allowed to transfer are configurable. No default settings are provided. − The maximum size of a file to transfer is configurable. The default value is 400 MB. − The maximum number of files to transfer concurrently on a per-user basis is configurable. The value ranges from 1 to 5, and the default value is 5. Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 86 Huawei Enterprise Communications Solution Overview 7 Security 7.3 Management Plane Security This topic describes the management plane security. EC solution supports an independent management plane, which separates management data from service data. − The management data and service data generated during interaction between the BMU and terminals are transmitted through different ports. − U1911/U1960/U1980/U1981 support separation of management network ports from service data network ports. Maintenance terminals access the servers or U1911/U1960/U1980/U1981 through SSH. Comprehensive management protocols are used. − The BIN channel between the BMU and the USM, BMU and the U1911/U1960/U1980/U1981 is encrypted using TLS for transmission. − HTTPS is used for web management. − FTPS is used for file upload and download. − eSight uses SNMPv3 for managing service NEs and uses TR069 over SSL for managing IP phones. The management channel between eSight and U1911/U1960/U1980/U1981 runs SSH. EC solution supports authentication based on strong passwords, and the default passwords are strong passwords, too. This approach effectively prevents brute-force attacks. EC solution records operation logs and run logs of different components, and these logs can be viewed and downloaded. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 87 Huawei Enterprise Communications Solution Overview 7 Security 7.4 IP Network Security The EC solution provides a secure networking scheme to ensure IP network security. As shown in Figure 12-1, firewalls must be deployed at the egresses of UC server zone and network management zone. The associated network management systems of the EC solutions can be deployed in the existing network management zone of the enterprise. Refer to the Communication Matrix document to configure firewall policies. Ensure that on the firewalls deployed at the egress of the server zone, only necessary service ports are opened to UC terminals and only necessary management ports are opened to O&M terminals. Ensure that ports used for interactions between servers (for example ports used by UC applications to access databases) are disabled on firewalls. Figure 7-1 Typical UC network (1) As shown in Figure 12-2, firewalls must be deployed at the egresses of UC server zone and network management zone. The associated network management systems of the EC solutions can be deployed in the existing network management zone of the enterprise. The MAA, SBC, and Meeting MS in an EC solution must be deployed at the demilitartized zone (DMZ) to process UC service requests received from terminals over the Internet. Firewalls deployed in the enterprise DMZ can provide production for UC components deployed in the DMZ. Refer to the Communication Matrix document to configure firewall policies. Ensure that on the firewalls deployed at the egresses of the server zone and DMZ, only necessary service ports are opened to UC terminals and only necessary management ports are opened to O&M terminals. Ensure that ports used for interactions between servers (for example ports used by UC applications to access databases) are disabled on firewalls. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 88 Huawei Enterprise Communications Solution Overview 7 Security Figure 7-2 Typical UC network (2) As shown in Figure 12-3, firewalls must be deployed at the egresses of UC server zone and network management zone. The associated network management systems of the EC solutions can be deployed in the existing network management zone of the enterprise. Internet access for UC services can be implemented using either the existing VPN system of the enterprise or newly purchased VPN system. Refer to the Communication Matrix document to configure firewall policies. Ensure that on the firewalls deployed at the egresses of the server zone and DMZ, only necessary service ports are opened to UC terminals and only necessary management ports are opened to O&M terminals. Ensure that ports used for interactions between servers (for example ports used by UC applications to access databases) are disabled on firewalls. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 89 Huawei Enterprise Communications Solution Overview 7 Security Figure 7-3 Typical UC network (3) Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 90 Huawei Enterprise Communications Solution Overview 8 Openness 8 Openness EC solution provides open, standard interfaces for third-party systems to perform secondary development. The standards-compliant external interfaces enable EC solution to connect to and be integrated with diverse third-party systems. External Interfaces Figure 8-1 illustrates the external interfaces provided by EC solution. Figure 8-1 EC solution external interfaces Connection to a Carrier Network U1911/U1960/U1980/U1981 connect to the PSTN using trunks, including SS7 (E1), PRA (E1/T1), QSIG (E1/T1), R2 (E1), BRI, and AT0 (FXO). U1980 does not support BRI and AT0 trunks. The USM can connect to the IMS or NGN through the U1900 series using a SIP trunk to implement voice calling. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 91 Huawei Enterprise Communications Solution Overview 8 Openness Interoperability with Third-Party Telephony Systems U1911/U1960/U1980/U1981 can interoperate with a variety of third-party telephony systems, such as Cisco UCM and Avaya IPT systems using SIP trunks. Supported services include basic telephony, supplementary telephony, and voice conferencing. In addition, U1911/U1960/U1980/U1981 can connect to conventional PBXs using narrowband trunks, such as SS7 and PRA. This compatibility expands the enterprise phone user base and also supports smooth evolution from TDM-based communication to IP-based communication. For more information about the interoperability of EC solution with third-party systems, visit http://www-scb.huawei.com/en/marketing-material and choose IP Telephony to obtain the corresponding interoperability testing reports. Integration with AD Servers EC solution uses the Light Directory Access Protocol (LADP) to integrate with an enterprise's existing Microsoft Active Directory (AD) server. After successful integration, contact information in the corporate directory in AD servers is synchronized to the Business Management Unit (BMU) included in EC solution. The integration between EC solution and an enterprise's AD server has the following benefits: The enterprise administrator maintains the corporate directory on the AD server. The enterprise administrator configures AD server connection parameters and timed data synchronization tasks on the BMU. After such configuration, updates on the corporate directory are synchronized in real time from the AD server to the BMU. Integration with Microsoft Lync Microsoft Lync is an enterprise-ready unified communications platform launched by Microsoft. It provides functions such as voice, IM, video, audio, and web conferencing over the Internet. In a network with U1900 series unified gateways, the voice gateway in EC solution can integrate with Microsoft Lync for voice communications. A VoIP client plug-in is available in EC solution to be integrated into the Microsoft Lync client for voice functions. Integration between the U1900 series unified gateway and Microsoft Lync to implement the following functions: − Voice communication between a Microsoft Lync client and a UC terminal − Voice communication between a Microsoft Lync client and a carrier user. The supported Microsoft Lync version is Microsoft Lync 2010 and Microsoft Lync 2013. Issue 01 (2016-06-30) A VoIP client plug-in integrated into a Microsoft Lync client to provide the following functions on the Microsoft Lync client: − Enabling and disabling the VoIP client plug-in on the Microsoft Lync client − Two new options (voice call and video call) displayed in the shortcut menu after a right-click on a contact − Plug-in tool panel, which contains icons for displaying the keypad, viewing historical records, setting the UC login account, switching between the UC soft terminal and desktop phone, and setting audio and video parameters. − Answering calls − Call control − Presence Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 92 Huawei Enterprise Communications Solution Overview 8 Openness The supported Microsoft Lync version is Microsoft Lync 2013. Microsoft Outlook Integration EC solution provides the following functions on Microsoft Outlook after integration: Displays the status of senders' and recipients' UC soft terminals in the mail address bar. Allows users to place a P2P or conference call by clicking the corresponding button when the information about one or more users entered in the mail address bar matches the user(s) in the corporate directory. Allows users to start a P2P or temporary group IM chat by clicking the corresponding button when the information about one or more users entered in the mail address bar matches the user(s) in the corporate directory. The supported Outlook versions are Outlook 2007, 2010, and 2013. Microsoft Internet Explorer Integration EC solution provides the following functions on Internet Explorer after integration: Dial plate: Users can click the dial plate button on the toolbar to display the dial plate. Meeting management: Users can click the meeting management button on the toolbar to display the meeting management page. The supported Internet Explorer versions are Internet Explorer 8, 9, 10, and 11. Secondary Development Capabilities Table 13-1 describes the secondary development capabilities supported by EC solution. Table 8-1 Secondary development capabilities Module Desktop openness Secondary Development Capabilities client Pre-integrated plug-ins: Internet Explorer, Outlook, electronic name card, SharePoint, Lync, and Sametime plug-ins Controls: COM, C++, C#, and JS controls API: C interface Custom UI Supports replacement of the following resources: Issue 01 (2016-06-30) - Desktop shortcut icon and name - Logo on the desktop client GUI - Words in the title bar of the main window - Background picture in the login window - Personal computer and public computer icons in the login window - Icon in the system tray - Background of the navigation bar in the main window - Button icons in the navigation bar in the main window Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 93 Huawei Enterprise Communications Solution Overview Module Mobile openness Issue 01 (2016-06-30) 8 Openness Secondary Development Capabilities client Controls: Android and iOS controls API: C interface for iOS and Java interface for Android Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 94 Huawei Enterprise Communications Solution Overview 9 9 Management and Maintenance Management and Maintenance The EC solution provides eSight, Business Management Unit (BMU), and Local Maintenance Terminal (LMT) to help users perform O&M tasks efficiently. 9.1 Centralized NE Monitoring eSight centrally monitors NEs by managing their performance and alarms. Topology Management eSight provides a network topology to present NEs and their connections. With the help of the network topology, users can understand the hierarchical structure and running status of all NEs across the network. When a new NE is created, eSight automatically discovers and adds it to the network topology. Alternatively, users can manually search for new NEs and add them to the network topology. Resource Management eSight manages NEs by subnet. According to the physical locations of the devices, the administrators can put the devices into different subnets for management. Performance Management eSight collects the performance data of managed NEs and displays it in charts. By reading these charts, users can understand potential network risks and take preventative measures accordingly. eSight displays monitoring results in bar charts or line charts to clearly show the performance trends. The administrators can eliminate potential risks by taking active measures before a performance counter reaches its threshold. Alarm Management eSight monitors network alarms in topology views, alarm panels, and alarm bar charts. It monitors network exceptions in real time so that the administrators can take measures against the detected network exceptions in a timely manner to restore network operation. The administrators can set remote notification rules, masking rules, and tones for alarms based on the site requirements, which optimizes network management. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 95 Huawei Enterprise Communications Solution Overview 9 Management and Maintenance Once eSight detects an alarm, the administrators can review alarm details, acknowledge the alarm, locate the alarm, and then clear the alarm. Configuration Management eSight allows the administrators to remotely configure specific devices. Device Panel Management eSight provides an intuitive device simulation GUI (also known as device panel) for U1911/U1960/U1980/U1981, where the administrators can view board and indicator status. Maintenance Management eSight supports batch upgrade of IADs and IP phones, which is useful when a large number of devices need to be upgraded. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 96 Huawei Enterprise Communications Solution Overview 9 Management and Maintenance 9.2 Centralized Service Management This topic describes the service management components in the EC system, including the UC service management system BMU, convergent conference scheduling portal EMP, built-in web management system of the U1900 SERIES, and built-in web management system of the USM. BMU The BMU is a service management system in EC solution. By connecting to multiple unified gateways, CDRServers, and ConsoleServers, the BMU enables users to manage a single or a batch of numbers, accounts, and conferences as well as perform other self-service tasks. Table 9-1 describes the BMU functions. Table 9-1 BMU functions Function Allows Users To... Number management Configure number allocation policies. Add, modify, and delete SIP numbers and POTS numbers in batches. User management Allocate passwords and roles to accounts. Add, modify, and delete accounts in batches. Conference management Configure conference access prefixes. Self-service Modify personal information. Query the call history. Schedule and query conferences. Upload or modify user profile images in addition to user names and departments. EMP In the convergent conference solution, the EMP is a convergent conference portal that allows common users and system administrators to perform operations such as scheduling conferences, managing conference rooms, and setting convergent conference parameters. Table 9-2 describes the convergent conference functions. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 97 Huawei Enterprise Communications Solution Overview 9 Management and Maintenance Table 9-2 Convergent conference functions Function Allows Users To... Schedule conferences Allows users to schedule convergent conferences and desktop conferences on the same interface. Users do not need to select the conference type. The system can automatically identify the conference type according to the entered information. Allows users to schedule instant conferences. Allows users to schedule a conference that can be held at the scheduled time. Allows users to schedule a periodic conference, specify the date or day in a week on which the periodic conference is held, and set the conference start time and end time. Allows the system administrator to manage names, locations, types, sizes, administrators of physical conference rooms, departments to which the physical conference rooms belong, and time zones where the physical conference rooms are located. Supports physical conference room management through graphical user interfaces (GUIs). Manage physical conference rooms Manage users Allows the system administrator to import common user accounts in batches in a VC+Web network. In other networking modes, UC accounts can be used to log in to the EMP. Displays customized enterprise information. Displays the enterprise logo, name, and background picture. Send conference notifications Allows users to receive conference email notifications that contain the conference topic, start time, location, participant quantity, participants, physical conference room, passcode, and link for joining the conference (link for a moderator to join a desktop conference or web link for joining a convergent or telepresence conference). Sends conference notifications to users' Outlook. The conference information is displayed in the Outlook calendar, and an alert is displayed on the users' PCs several minutes before a conference starts. Sends SMS messages containing the conference information to users' mobile devices. Built-in Web Management System of U1911/U1960/U1980/U1981 U1911/U1960/U1980/U1981 provides a built-in web management system for users to: Configure boards, users, and trunks using the configuration wizards provided. Configure data, services, and networks in an intuitive manner. Perform self-service tasks, including scheduling and querying conferences, initiating instant conferences, activating services, and maintaining service passwords. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 98 Huawei Enterprise Communications Solution Overview 9 Management and Maintenance Built-in Web Management System of the USM The USM provides a built-in web management system for users to: Deploy the CM server. Perform system, user, route, service, and device connection configurations. View the server status and network topology. Perform system backup and restoration. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 99 Huawei Enterprise Communications Solution Overview 9 Management and Maintenance Batch NE Configuration and Upgrade eSight is a network element (NE) management system in EC solution. Using eSight, users can bulk configure and upgrade a variety of NEs, including IADs and IP phones. Table 9-3 describes the batch NE configuration and upgrade functions of eSight. Table 9-3 Batch NE configuration and upgrade functions NE You Can Bulk Configure... You Can Bulk Upgrade... IAD Network parameters Host software Proxy server parameters eSight basic parameters IADs periodically detect the upgrade files and versions on the FTP server and automatically upgrade their software when a new version is detected. Device restart parameters Configuration file loading parameters Automated parameters IP phone upgrade Main programs, language packages, signal tones, and TLS certificate of IP Phone 7900 series and video phone 8950. For desktop client, the desktop client upgrade package needs to be uploaded to the BMU first; the system automatically prompts users to upgrade desktop client upon desktop client restart, if a new version is available. For mobile client, the software of the latest version is released on the related application stores. When a new version is available, mobile phone users or tablet users will receive an upgrade notification. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 100 Huawei Enterprise Communications Solution Overview 9 Management and Maintenance 9.3 Local Installation Configuration and Maintenance This topic describes the tool iWeaver for installing the ECS and the tool for configuring and maintaining the U1900 series and USM. iWeaver Installation Tool iWeaver is a tool for installing the ECS service software and matching basic software in the Linux operating system. iWeaver allows users to install ECS components (including the BMU, AppAgent, eServer, MAA, Meeting MS, and UMServer) and load patches by simply one click in 20 typical scenarios in an IPT or UC solution. In addition, iWeaver allows users to independently install the Oracle database and VCS software and configure time synchronization between Linux servers. U1900 Series LMT The LMT system connects to U1900 series using SSH/Telnet, and a maximum of four U1900 series can be connected at the same time. Main management functions of the LMT system: Configuration management Provides a command navigation tree for data configuration and query. Alarm management Supports real-time alarm query and provides alarm handling suggestions; supports alarm export. Maintenance management Supports functions such as data configuration, and patch management. Signaling tracing Traces and parses broadband and narrowband signaling. Upgrade Provides version and patch backup, version upgrade, and patch installation functions. Log collection Allows users to load operation logs, run logs, and debug logs. Offline operation Allows users to parse alarm files, log files, and signaling tracing files offline, and supports offline upgrade of data files. USM LMT As the core of the LMT, the OM manages and maintains configuration data and alarm information required during USM running. The LMT is the OM client that provides a manmachine interface. Users can perform a variety of functions on the LMT, including USM data configuration, device status query, alarm query, message tracing, and deployment and upgrade. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 101 Huawei Enterprise Communications Solution Overview 9 Management and Maintenance Figure 9-1 LMT logical networking Users can perform a variety of functions on the LMT, including USM data configuration, device status query, alarm query, message tracing, and deployment and upgrade. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 102 Huawei Enterprise Communications Solution Overview 9 Management and Maintenance 9.4 Statistics Query EC solution supports statistics query. The enterprise administrator can query related data on the BMU, and common enterprise users can query their call records on the self-service platform. The enterprise administrator can log in to the BMU to query data listed in Table 9-4. Table 9-4 Statistical items to query Statistical Item Description Call record Collects the call records of all enterprise users. Number of terminal users Queries the number of terminals in use and the number of online terminals. Message audit Audits messages such as IMs, SMS messages, login and logout messages, and rich media messages. The audit function can be enabled or disabled. Conference resources Displays the usage of conference resources on the unified gateway. This approach helps the administrator schedule conference resources more appropriately. Issue 01 (2016-06-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd 103