Network Border Switch™ (NBS)
A Sonus Networks IMS Architecture Component
TO GROW MARKET PRESENCE
AND REVENUES THROUGH VOICE-
OVER-INTERNET PROTOCOL (VOIP)
SERVICES, TELECOMMUNICATIONS
PROVIDERS ARE EXPANDING
THEIR INTERNETWORKING BEYOND
TIME-DIVISION MULTIPLEXING
(TDM) CONNECTIONS via THE
INTERNET PROTOCOL (IP). with IP
INTERCONNECT, SERVICE PROVIDERS
can QUICKLY, EFFECTIVELY AND
FLEXIBLY DEPLOY CARRIER-TO-
CARRIER CONNECTIONS as A
POWERFUL ALTERNATIVE TO TDM.
IP INTERCONNECT FOR CARRIER-TO-
PREMISES APPLICATIONS ENABLES
ADVANCED SERVICES, SUCH AS
VOICE-OVER-BROADBAND (VOBB),
allowing CARRIERS to LOWER
THEIR COSTS AND DEPLOY NEW
SERVICES WHILE ENSURING CONTROL
AND SECURITY.
however, IP INTERCONNECT
POSES SIGNIFICANT NETWORK AND
CUSTOMER SECURITY CHALLENGES
BY OPENING NETWORK BORDERS TO
UNTRUSTED ENTITIES. WITH ITS VAST
carrier multimedia network
and voip EXPERIENCE IN DESIGNING,
DEPLOYING AND SUPPORTING MANY
OF THE WORLD’S LARGEST CARRIER
MULTIMEDIA NETWORKS — AND ITS
WORLDWIDE MARKET LEADERSHIP IN
CARRYING VOIP MINUTES PER MONTH
— SONUS NETWORK HAS CREATED
A SECURITY SOLUTION FOR NEXT-
GENERATION NETWORKS.
Network Border Switch
038˜ 3'8˜
9>:=Iflk`e^J\im\i JJ.>Xk\nXp
#ORE0ACKET
.ETWORK 0EER0ACKET
034. .ETWORK
'38˜ '38
Fg\eJ\im`Z\jJn`kZ_ )NSIGHT˜ E\knfib9fi[\iJn`kZ_
E\knfib9fi[\iJn`kZ_ DXeX^\d\ekJpjk\d
0ACKET %-3
!CCESS <c\d\ekDXeX^\d\ek
.ETWORK
@8;j $3)˜
9`cc`e^D\[`Xk`fe
G_fe\j
FIGURE 1: Sonus' Network Border Switch (NBS) is a single, cost-effective car-
rier-grade solution for IP-to-TDM and IP-to-IP interconnectivity.
THE SONUS NETWORK BORDER the new industry standard for service
SWITCH (NBS) operator networks: the IP Multimedia
Subsystem (IMS). Combining NBS
Based on the Sonus market-leading secure border switching with the
GSX™ Open Services Switch, the network routing and intelligence func-
Sonus Network Border Switch (NBS) tion of Sonus’ PSX™ Routing Server
is the only carrier-class solution that (3GPP IMS BGCF) enables carriers to
provides IP-to-IP border control and deploy the same services and admin-
PSTN media gateway capabilities— istrative capabilities at the IP.
integrating security, session control
and media control. This integrated
approach allows carriers to protect
their investment as network traffic
evolves from purely TDM to a mixture
of TDM and IP and to pure IP.
The NBS is an integral component
of the Sonus IMS Architecture, a
widely deployed infrastructure based
on the same principles that underlie
Network Border Switch
GFKJ
G_fe\
0ACKET.ETWORK
@8;
=Xo
=`i\nXcc&
E8K;\m`Z\
G:
FIGURE 2: Hosted Network Address Translation (NAT) traversal via the Sonus Network Border Switch.
NEXT-GENERATION NETWORK
BORDERS AND THEIR SECURITY
REQUIREMENTS
Service providers today have four
key opportunities to build and expand
next-generation networks through
IP-to-IP connectivity:
• Peering, for efficient carrier-
to-carrier VoIP network intercon-
nections
• Enterprise access, for managed
VoIP services with business
customers
• End-user access, for consumer
voice-over-broadband services
via DSL, cable and emerging IP
wireless services
• Application service provider
access, for specialized managed
VoIP/multimedia application ser-
vices to consumers and businesses.
Sonus Networks
'38˜
E\knfib9fi[\iJn`kZ_
9>:=Iflk`e^J\im\i
To protect this IP-to-IP connectiv-
ity as part of a defense-in-depth
strategy, products such as network
address translation (NAT) devices,
firewalls and intrusion prevention sys-
tems (IPS) have been used. Although
having a definite role in network
protection, these systems have been
optimized for detecting and blocking
exploits against lower-level protocols
(e.g., IP and TCP) and have not been
designed to handle the latency, integ-
rity and context requirements of ses-
sion-oriented protocols, such as SIP,
H.323 and MGCP.
The current generation of IP-to-IP
session border controllers (SBCs)
address particular aspects of VoIP
network interworking and protection.
SBC services may include:
• Resolving the NAT/firewall travers-
al requirements for premises-based
end-users wishing to utilize carrier-
provided IP-based voice services
J@GJ\im`Z\j
0ACKET.ETWORK
038˜
• Providing basic rate limiting, band-
width monitoring and address fil-
tering
• H323/SIP interworking.
Today’s ultracompetitive telecom-
munications environment also requires
a more cost-effective way to establish
and expand the border of next-genera-
tion networks than the above solutions
provide. For example, today’s SBCs are
dedicated systems deployed at the
network edge and often colocated with
other equipment, such as PSTN (a.k.a.,
media) gateways. These dedicated SBCs
require separate installation, provision-
ing and on-going management, further
increasing capital expense and the
cost of operations. Lastly, since SBCs
are in the signaling and media path, it
is imperative that the platform be 100
percent carrier grade by design. SBCs
must be held to the same reliability and
uptime standards as other key compo-
nents, such as media gateways.
Network Border Switch
The optimal network border solution
would give carriers the ability to
perform security as well as other key
functions, such as media gateway
processing, in the same system to
take advantage of changing network
traffic demographics while leverag-
ing existing capital investments and
operational resources.
A NEW CARRIER-CLASS SOLUTION
FOR BORDER SECURITY
Sonus has developed the Network
Border Switch to meet the stringent
carrier-class requirements for
VoIP/multimedia security, reliability,
scalability, voice quality and IMS
standards compliance. Until the intro-
duction of Sonus’ NBS, there hasn’t
been a solution that can integrate
multiple network border functions
(e.g., session border control and
PSTN media gateway) into a single,
cost-effective carrier-class solution.
This next-generation product enables
service providers to optimize the
performance, security and cost of
their network border by deploying
carrier-class circuit-to-packet and
#ARRIERS4RUSTED
.ETWORK
FIGURE 3: Split DMZ provided by the Sonus Network Border Switch
Sonus Networks
packet-to-packet internetworking
in a single chassis. NBS can also be
configured as a dedicated packet-to-
packet chassis as needed.
The NBS is based on the GSX
Open Services Switch platform, the
industry’s widely deployed carrier-
class switching system. The GSX
platform is renowned for meeting
carrier-class availability, scalabil-
ity, performance and voice-quality
requirements. Combined with the
comprehensive routing and protocol
support of Sonus’ PSX Routing Server
(IMS Breakout Gateway Control
Function), they deliver an integrated
IP multimedia network that supports
extremely high performance and scal-
ability, while maintaining openness.
The NBS provides network border
control for carrier-to-carrier and
carrier-to-premises applications. NBS
security, session control and media
control functions, including:
• Network Address Translation
(NAT) and topology hiding
'38˜
E\knfib9fi[\iJn`kZ_
Iflk\i
• Access control via pinhole firewall
• Bandwidth and QoS theft
protection
• Split DMZ connectivity between
two networks for greater internal
network security
• 802.1q VLAN support for
multiplexing existing network
interfaces expanding internetwork
connectivity
• Session management between
peer VoIP networks
• SIP and H.323 proxy, back-to-back
user agent and interworking
• Support for peering, using SIP-I
and SIP-T
• Support for connecting to multiple
networks that have disjoint IP
address spaces
• The ability to connect to multiple
networks which may have overlap-
ping IP address spaces
5NTRUSTED
.ETWORK
Network Border Switch
Network Border Switch
• Improved session capacity
and hardware assist for network
intensive operations via new sys-
tem options
• Full, integrated Lawful Intercept.
The integrated system’s functions are
configured, monitored and managed
by the Sonus Insight™ Management
System.
FIELD-PROVEN HIGH AVAILABILITY,
PERFORMANCE/SCALABILITY AND
VOICE QUALITY
Based on the widely deployed GSX
platform and combined with the PSX
Breakout Gateway Control Function,
the Sonus NBS has all the qualities
that telecommunications providers
require for assured high-quality ser-
vice and future-proofing.
High Availability: The GSX platform
supports fully redundant configura-
tions designed for 99.999 percent
or more availability. All interface
modules are fully redundant (N+1 for
circuit and packet interfaces and 1+1
for management cards), maintaining
active calls upon switchover. Optical
interface modules support automatic
protection switching for the fastest
switchover to redundant optical
facilities. To complete the redundancy
scheme, the GSX Platform supports
live software upgrades, allowing the
network to remain up and running
while implementing new functionality.
Powerful Performance and Scalability:
The GSX platform’s GSX9000 configu-
ration scales incrementally, allowing
carriers to grow capacity precisely
Sonus Networks
in line with subscriber demands and
cost-effectiveness. For example, a
GSX9000 can scale from hundreds to
thousands of ports in a single chassis
to multi-chassis configurations of mil-
lions of ports — all managed by Sonus’
Insight application. The GSX systems
modular design distributes process-
ing across each high-density card to
prevent bottlenecks, streamline data
flows, minimize latency and enable
linear scalability.
Voice Quality: The GSX platform is
field proven to provide the voice
quality required for carrier networks.
It achieves this through extremely
low internal delay, world-class echo
cancellation and support for IP net-
work QoS features (TOS and MPLS)
standards. The GSX has been proven
to support voice quality that is equal
to or better than the PSTN.
NBS BENEFITS
With NBS’ robust feature set, carriers
can derive benefits, such as:
Operational Efficiencies: Carriers can
provision and manage diverse signal-
ing and media types with the same
method of procedure (MOP) from
Sonus’ Insight Management System
at the TDM-IP network border or the
IP-IP network border.
Expanded Revenue Opportunities:
Advanced NBS features, such
as transcoding between codec types,
provide carriers with additional
revenue opportunities in their
services portfolio.
Capital Expenditure Efficiencies: By
integrating circuit and packet network
support in a single platform, carriers
get high asset utilization where the
GSX is deployed. The GSX is a plat-
form for evolving security features,
providing investment protection in
existing Sonus architecture.
Ease of Deployment: By supporting
connectivity with networks that may
have conflicting (i.e., overlapping) or
disjoint IP address spaces with their
internal network, carriers can more
easily establish peering relationships
to expand market presence.
Flexibility of Deployment: By sup-
porting both carrier-to-carrier and
carrier-to-premises deployments, net-
work administrators can use a single
product that performs both functions.
In addition, carriers can cost-effec-
tively configure the GSX platform for
TDM interconnect and IP interconnect
functions, increase or decrease either
function as their network strategy
dictates and dedicate a GSX chassis
for IP interconnect.
No Impact on Existing Subscribers:
End-points that reside behind
premise security systems, such as
NAT devices and firewalls, require
no changes to participate in a Sonus
network by using NBS features, such
as NAT traversal.
Increased Capacity Using Less Real
Estate: With packet server options for
the GSX9000, system administrators
can immediately increase the number
of simultaneous sessions. Also, by
installing these Sonus packet server
options, carriers will have hardware-
Network Border Switch
assist logic ready to support future
compute-intensive security functions
from Sonus.
Assurance of Carrier-Class
Performance: The GSX9000 Open
Services Switch is a high-density
platform that is designed for central
office operation. Its high-slot capacity,
reliability and manageability features
make it the ideal platform for deliver-
ing mission-critical network border
functions, PSTN gateway functions, or
both simultaneously.
Standards Compliance: Sonus has
been a long-time proponent and
implementer of industry standards,
such as the SIP protocol. The NBS
adheres to this standard as well
as the new IMS industry standard
for multimedia architectures. This
enables carriers to seamlessly and
cost-effectively comply with the
developing IMS standards and to
maximize their existing investment in
Sonus solutions.
NETWORK SECURITY AND THE
INDUSTRY STANDARD NETWORK
ARCHITECTURE
Along with its commitment to lead-
ing-edge technology innovation,
Sonus is fully committed to the latest
industry standard: the IP Multimedia
Subsystem (IMS).
The IMS standard is endorsed
by worldwide standards organiza-
tions and provides a three-layered
architecture for converged wireless-
wireline VoIP/multimedia networks.
The Sonus Network Border Switch
and all other Sonus products
embody this architecture.
The NBS product resides at the
architecture’s Border and Media
Control layer, which defines the
components that manage the border
of interconnected networks, such as
DSL, cable, Ethernet, 2.5/3G wireless
and circuit networks. In this layer, the
NBS supports standard IMS signaling
management functions: Proxy–Call
Session Control Function (P-CSCF),
Interrogating–Call Session Control
Function (I-CSCF) and Topology-
Hiding Internetworking Gateway

I\dfk\J`^eXc`e^G\\ij

;DQIflk\i
fgk`feXc :Xii`\i8
5NTRUSTED <Xjk
.ETWORK ('%)%(%(
E\knfib
@ek\i]XZ\j
)* :Xii`\i8
N\jk
E\knfib ('%(%(%(
@ek\i]XZ\( MC8E(
4RUSTED
.ETWORK MC8E)
;DQIflk\i
fgk`feXc :Xii`\i9
MC8E* 5NTRUSTED ('%(%(%(
'38˜ .ETWORK
E\knfib9fi[\iJn`kZ_
E\knfib
@ek\i]XZ\+
:Xii`\i:
('%(%(%(
<k_\ie\kJn`kZ_

:Xii`\i;
5NTRUSTED ('%)%(%(
.ETWORK
;DQIflk\i
fgk`feXc

FIGURE 4: Sonus IMS Architecture: Provides secure IP-to-IP network connectivity.

Sonus Networks Network Border Switch

Network Border Switch

D8E8><D<EK
:?8I>@E> 8GGC@:8K@FEJ

FJG8 @DODlck`d\[`X 8JO

8ggc`ZXk`fe 8ggc`ZXk`fe =\Xkli\
J\im\ij GcXk]fid J\im\i

J<JJ@FE:FEKIFC

?JO JIO GJO9>:=

@ej`^_k ?JJ J$:J:= Iflk`e^
J\im\i

9FI;<ID<;@8:FEKIFC
J>O
FJG8 >JO J>N
E9J GJKE
G&@$:J:= D\[`X D>:=&
J\im\i D>N
E9J Fk_\iMf@G
K?@> E\knfib

8ZZ\jj

JlYjZi`Y\i
FIGURE 5: Sonus IMS Architecture includes the Network Border Switch for secure IP-to-IP network interconnectivity.

(THIG). When these standard IMS to IP access networks. This

functions are empowered with full
media control, two distinctly powerful
roles for the NBS emerge:
• Peering NBS: For a high-
volume VoIP interconnection
with other service provider net-
works. This configuration sup-
ports the I-CSCF (THIG) func-
tions. Additionally, it controls and
polices media flows based on the
signaling information.
configuration integrates the
P-CSCF and I-CSCF functions.
Additionally, it controls and
polices media flows based on
the signaling information.
For a tutorial on the IMS
industry standard architecture,
read the Sonus IP Multimedia (IMS)
Solution brochure, available on
www.sonusnet.com.

• Access NBS: For a high-

performance, secure interface

Sonus Networks Network Border Switch

Network Border Switch
USA Corporate Headquarters:
Sonus Networks, Inc.
250 Apollo Drive
Chelmsford, MA 01824
+1 978 614 8100
+1 978 614 8101 Fax
US - Southwest Region
Sonus Networks
1130 East Arapaho Road
Suite # 200
Richardson, TX 75081
+1 720 359 1570
+1 978 614 8101 Fax
US - Eastern Region
Sonus Networks
250 Apollo Drive
Chelmsford, MA 01824
+1 978 614 8569
+1 978 614 8101 Fax
US - Western Region
Sonus Networks
600 17th Street
Suite 2800 South
Denver, CO 80202
+1 720 359 1570
+1 303 260 6401 Fax
EMEA Headquarters:
Sonus Networks Ltd
Site A - Edison Road
1st Floor - Edison House
Dorcan, Swindon
Wiltshire SN3 5JX
United Kingdom
+44 (0) 1793 601400
+44 (0) 1793 601401 Fax
France
Sonus Networks
41-41 Bis, avenue de l'Europe
BP264
78147 Velizy Cedex
France
+33 1 34 63 08 82
+33 1 34 63 06 99 Fax
Germany Trademark Notice
Sonus Networks GmbH Sonus is a registered trademark of
Kelsterbacher Strasse 18A Sonus Networks, Inc. ASX, IMX, Sonus
D-65479 Raunheim Insight, DSI, GSX, GSX4000, GSX9000,
Germany HSX, PSX, SGX and SRX are trademarks of
+49 6142 94277 0 Sonus Networks, Inc. Open Services Partner
+49 6142 94277 29 Fax Alliance and SonusCARE are service marks
of Sonus Networks. All other trademarks,
Asia Pacific Headquarters: service marks, registered trademarks,
Sonus Networks Pte Ltd or registered service marks may be the
350 Orchard Road property of their respective owners.
#21-01/03 Shaw House
Singapore 238868 Disclaimer and Restrictions
+65 6887 2233 This document is for informational
+65 6887 5554 Fax purposes only and is subject to change
without notice. Sonus has no obligation to
Japan provide any future releases or upgrades
Nihon Sonus Networks. K.K or any of the features, enhancements
15th Floor, Cerulean Tower, 26-1 or functions set forth in this document.
Sakuragaoka-cho, Shibuya-ku Unless specifically required in a written
Tokyo 150-8512 agreement with Sonus, no product
Japan purchased from Sonus is conditioned upon
+81 3 5456 5240 Sonus’ development or delivery of any
+81 3 5456 5511 Fax future release or upgrade or of any feature,
enhancement or function. This material
Malaysia
does not constitute a commitment on the
Sonus Networks
part of Sonus Networks, Inc. This material is
Level 40, Tower 2
provided “AS IS,” with all faults, and without
PETRONAS Twin Towers KLCC
any warranties, including, but not limited,
50088 Kuala Lumpur
warranties of merchantability, performance,
Malaysia
or fitness for a particular purpose. While
+60 3 2168 4468
reasonable efforts have been made in the
+60 3 2168 4201 Fax
preparation of this publication to assure its
China accuracy, Sonus Networks, Inc. assumes no
Sonus Networks liability resulting from technical or editorial
Beijing Representative Office errors or omissions, or for any damages
Suite No. 3, Plaza Business Centre Beijing resulting from the furnishing, performance,
3/F North Tower, Beijing Kerry Center or use of the information contained herein.
No. 1 Guang Hua Road Sonus Networks, Inc. reserves the right to
Beijing 100020, PRC revise this publication, and to make changes
+86 10 6505 9086 on the content hereof without notice.
+86 10 6505 9085 Fax
Copyright
Bangalore Copyright © 2006 Sonus Networks, Inc.
Sonus Networks (India) Private Limited All rights reserved. Printed in the U.S.A.
Unit 2, 8th Floor, Inventor Building This publication may be used, copied, or
International Technology Park distributed only in accordance with the
Whitefield Road, Bangalore - 560 066 terms of the license agreement. Any other
India use, reproduction or distribution may occur
+91 80 5190 2600 only upon Sonus’ prior written consent.
www.sonusnet.com Document 022006v2_NBS_B
Network Border Switch