SIP users use SIP to communicate with a SIP server for call connection. On the unified gateway, SIP user devices can be IP phones, eSpace soft terminals, and POTS phones connected to eSpace IADs. The unified gateway functions as a SIP server that receives registration and call requests from SIP users. Figure 1 shows the network involving SIP users.

Figure 1 Unified gateway network involving SIP users 

The unified gateway supports batch and single number allocation. You can select an allocation mode based on the number plan. If you select the batch mode, the unified gateway allocates numbers in batches based on the specified start number, number step, and number count.

The unified gateway supports four user right levels. You can configure different right levels for different users to control the service and call rights of users.

• Table 1 lists the service rights for different user right levels.

  Table 1 Service rights for different user right levels

  User Right Level	Service Rights
  Default	Users of this level have rights to use the local number query, call transfer, call forwarding, call waiting, abbreviated dialing, call-out barring, alarm clock, CLIP, password change, phone meeting, unified fax mailbox, call park, phone permission, ONLY, DND, multi-call, instant meeting and absent user services.
  Common	In addition to service rights for the Default right level, users of this level have rights to use the RCB(only for POTS users), CBB, designated pickup, and group pickup services.
  Advanced	In addition to service rights for the Normal right level, users of this level have rights to use the three-way calling, ringing, break-in, forced release, hotline, CTVMU, CTVMB, CTVMNR, CTFMU, CTVMO, call forwarding presence, call forwarding conditional, callback on no reply, and BLF services.
  Super	In addition to service rights for the Advanced right level, users of this level have rights to use the privileged user, secretary, secretary station services.

• Table 2 lists the call rights for different user right levels.

  Table 2 Call rights for different user right levels

  User Right Level	Intra-Office Call	Local Call	National Toll Call	International Toll Call
  Default	√	√	×	×
  Common	√	√	Only working time	×
  Advanced	√	√	√	Only working time
  Super	√	√	√	√

  To meet common users cannot make national toll calls, and advanced users cannot make international toll call in non-working hours, on the basis of the PIN-Code call barring service, the config set workingtime switch switch starttime starttime endtime endtime directdialtmpright on command can be executed on the unified gateway to set the working time and enable the temporary toll call rights. In this way, common user can make national toll calls and an advanced user can make international toll calls in non-working hours. For details, see Configuring the Function of Making Toll Calls in Non-Working Hours.

During number allocation, you must specify the SIP device IDs (used as registered accounts of SIP users) and authentication modes, and ensure that the settings for these parameters are the same on the SIP user side and the unified gateway.

Scenario Description

This topic uses the following scenario as an example to describe how to allocate numbers to SIP users. You must allocate numbers based on the actual number plan.

• You need to configure 32 SIP users who use POTS phones connected to an IAD. The user numbers range from 7000 to 7031.
• You need to configure one SIP user who uses an IP phone. The user number is 7096.
• All SIP users have rights of the Default user right level and use password authentication.

Figure 2 shows the process of allocating numbers to SIP users based on the preceding requirements.

Figure 2 SIP user number allocation process 

 NOTE:

• eSpace soft terminals are components of the eSpace UC solution. This topic does not describe how to allocate numbers to eSpace soft terminals. For details, see the product documentation for the eSpace UC Product Documentation.
• To prevent the failure to release system resources in time due to unexpected IP terminal power outage, it is recommended that you enable the SessionTimer function on the unified gateway and all IP terminals. For details, see Configuring the SessionTimer Function.

Configuring User Data on the unified gateway in CLI Mode

1. Log in to the U1900 in CLI mode and access the Config mode. For details, see Logging In to the unified gateway Using the CLI.
2. Add SIP device IDs.

   config add batch sipue seid seid authorizationtype authorizationtype isuc isuc password password number number

   Table 3 Parameter description

   Parameter	Description	Value
   seid	Indicates the start device ID. The device ID is equivalent to the registration account of a SIP device, such as the SIP user ID configured during IP phone registration. The device ID of each SIP user must be unique and be the same as that configured on the SIP device. To facilitate memorization, you are advised to set the device ID to the user number to be allocated to the device.	The value must be a string consisting of 1 to 31 characters. This parameter has no default value.
   authorizationtype	Indicates the authentication mode, which is used by the system to authenticate a SIP device when the SIP device attempts to register with the system. The options are as follows: authbyeid: authentication based on the password noauth: no authentication authbyip: authentication based on the IP address authbyeidandip: authentication based on the password and IP address authbyaddrpool: authentication based on the IP address pool To increase the security of user accounts, You must configure authentication when registering SIP users. you are advised to set this parameter to authbyeid, authbyip, authbyeidandip, or authbyaddrpool.	Five options are available: authbyeid, noauth, authbyip, authbyeidandip, and authbyaddrpool. This parameter has no default value.
   password	Indicates the authentication password. This parameter needs to be set only when authorizationtype is set to authbyip or authbyeidandip. The password must be the same as that specified for the SIP device.	The value must be a string consisting of 8 to 31 characters. This parameter has no default value.
   number	Indicates the number of devices to be added in a batch.	The value must be an integer, and the value range varies depending on the device model. U1960: 1–1000 U1911: 1–100 U1910: 1–100 U1930: 1–300 U1980: 1–1024 U1981: 1–1000 The default value is 1.

   Example: Add 32 SIP device IDs 7000 to 7031 with the authentication password being huawei123; add SIP device ID 7096 with the authentication password being huawei123.

   config add batch sipue seid 7000 authorizationtype authbyeid password huawei123 number 32
   ====  Command executed success !  ====
   config add batch sipue seid 7096 authorizationtype authbyeid password huawei123 number 1
   ====  Command executed success !  ====

3. Add SIP users.

   config add subscriber econid eid dn dn password password webpassword webpassword number number

   Parameter	Description	Value
   eid	Indicates the start device ID. The SIP device must be added through the config add sipue or config add batch sipue command in advance. Otherwise, it cannot be referenced here.	The value must be a string consisting of 1 to 31 characters. This parameter has no default value.
   dn	Indicates the start user number.	The value must be a string consisting of 1 to 16 characters. This parameter has no default value.
   password	Indicates the user password. It indicates the initial password that users use in outgoing call barring, password-based call barring, ONLY, and deactivation of all services. The password contains six decimal digits, and users can change their passwords through their phones.	The value must be a string consisting of six characters. This parameter has no default value.
   webpassword	Indicates the web self service login password.	The value must be a string consisting of 8 to 16 characters. This parameter has no default value.
   number	Indicates the number of users.	The value must be an integer, and the value range varies depending on the device model. U1910/U1911: 0–100 U1930: 1–300 U1960: 1–1000 U1980: 1–1024 U1981: 1–1000 The default value is 1.

    NOTE:

   • From V200R003C30SPC300, two additional parameters, namely Service password and Self-service login password, are provided for a user being created. When adding a user, you can configure Service password and Self-service login password, or run the config system subscriber defaultpwd password password webpasswordwebpassword command in global config mode to configure the default service password and self-service login password for the user. If the passwords are not configured either using the command or when the user is added, the user fails to be created. If the passwords are configured both using the command and when the user is added, the passwords configured when the user is added prevail.

   • To prevent an IP phone or a soft client from being maliciously registered and ensure network security, In the V200R003C50SPC300 and later versions, you can configure locking of a SIP user when the number of successful registration times reaches the threshold. In the specified period, if the number of successful registration times exceeds the specified threshold, a user is locked for the specified lock duration. The lock duration is configurable. After the user is locked, the number of successful registration times is reset for the user. You can run the config modify sip parameter command to configure the maximum number of registration times allowed for a SIP user, run the show sipue command to query the user lock status, and run the Unlock Sipue Freeze State eid to unlock a SIP user.

   Example: Add 32 SIP users 7000 to 7031, the password is 112233, the webpassword is Aaaaaa_Aa7654321; add SIP user 7096, the password is 112233, the webpassword is Aaaaaa_Aa7654321.

   config add subscriber eid 7000 dn 7000 number 32 password 112233 webpassword Aaaaaa_Aa7654321 
   ====  Command executed success !  ====
   config add subscriber eid 7096 dn 7096 number 1 password 112233 webpassword Aaaaaa_Aa7654321 
   ====  Command executed success !  ====

    NOTE:

   The Service password and Self-service login password are added in the unified gateway V200R003C30SPC300.
4. Run the save command to save the data.

   save
   ====  Command executed success !  ====

   

   The unsaved configurations will be deleted after the device is restarted.

Configuring Connection and User Data on an IAD

1. Log in to the CLI and access the global configuration mode.

   Log in to the CLI as the root user using the password huawei123) and access the global configuration mode. For details, see the eSpace IAD132E(T) Product Documentation.

   TERMINAL>enable  //Access the privileged mode from the common mode.
   TERMINAL#configure terminal //Access the global configuration mode.

    NOTE:

   • If you need to configure the IAD for a long period of time, change the timeout duration so that the system does not automatically exit frequently. (The default timeout duration is 5 minutes. The maximum timeout duration is 255 minutes. If you set the timeout duration to 0, the system does not automatically exit.) For example, to set the timeout duration to 15 minutes, run the following command:

     TERMINAL(config)#terminal timeout 15

   • After all configurations are complete, you need to run the exit command to exit the system.
   • When you exit the system, the timeout duration is automatically reset to 5 minutes.
2. Configure the SIP server interworking data.

   sip server <0-2> address address domain domain port port

   Set the IP address to that of the unified gateway. Retain the default values for other parameters. For example, if the server IP address is 192.168.10.10, run the following command:

   sip server 0 address 192.168.10.10 domain IAD port 5060
   ====  Command executed success !  ====

3. Configure the IAD user data.
   1. Run the display protocol-mode command to view the current protocol mode. If it is not SIP, run the protocol-mode sip command to change the protocol mode to SIP.
   2. Add SIP numbers for IAD FXS users.

      sip user <0-31> id id name name password password

      For example, to add a SIP number for FXS user whose user ID and name are both 7000, run the following command:

      sip user 0 id 7000 name 7000 password huawei123
      ====  Command executed success !  ====

       NOTE:

      Different ports on boards installed on an IAD map different cable colors. For example, port 7 maps the white blue cable on the OSU board installed in slot 1 on an IAD. For details about the mapping between the ports and cable colors, see section "Pins of the User Cable" in the eSpace IAD132E(T) Product Documentation.
4. Run the write command to save the data.

Configuring Connection and User Data on an IP Phone

If the SIP users on the unified gateway use IP phones, you must configure the connection data and allocate user numbers on IP phones after adding SIP users on the unified gateway.

• Configuration on an eSpace 7910 IP phone
  1. Log in to the IP phone web management system.
  2. Choose Advanced > Server, set Network Environment to UC2.X, chooseLogin Mode to Phone number and click Save.
  3. Choose Advanced > Configuration Wizard.

     The Configuration Wizard > Network page is displayed.

  4. Click Next.

     The Configuration Wizard > Server Settings page is displayed.

  5. Configure the SIP server IP address and port number, as shown in Figure 3.
     Figure 3 Configuring the SIP server 
     
  6. Click Next.

     The Configuration Wizard > Account Settings page is displayed.

  7. Configure the phone account, user name, and password, as shown in Figure 4.
     Figure 4 Configuring the phone account 
     
     Table 4 describes the key parameters.

     Table 4 Key parameter description

     Parameter	Description
     Account	SIP user ID used in authentication. The value is the same as the SIP device ID configured on the unified gateway.
     User Name	Account name provided by the VoIP service provider. The value is similar to or is a phone number. It is the same as the user number configured on the unified gateway.
     Password	Indicates the password used for an account to register with the SIP server. Set this parameter to the authentication password for the SIP user configured on the unified gateway. In U1900 V200R003C20 or a later version, the password can be changed on the Self-service > ONLY page for the unified gateway self-service platform.
     Server 1	IP address of the SIP server. Set this parameter to the IP address of the unified gateway.
     Port	Port number of the SIP server. NOTE: If TLS is selected, the default value of this port is 5061. If UDP or TCP is selected, the default value of this port is 5060.

  8. Click Save.
• Configuration on an eSpace 7850 IP phone
  1. Log in to the IP phone web management system.
  2. Click the Account tab and configure the connection and user data.

     Figure 5 shows the connection and user data configured according to the scenario description.

     Figure 5 Configuring the account information on an IP phone 
     

     Table 5 lists the key parameters. For detailed description about the parameters, see the eSpace 7850 Administrator Guide.

     Table 5 Key parameter description

     Parameter	Description
     Register Name	SIP user ID used in authentication. The value is the same as the SIP device ID configured on the unified gateway.
     User Name	Account name provided by the VoIP service provider. The value is similar to or is a phone number. It is the same as the user number configured on the unified gateway.
     Password	Password corresponding to Register Name. The value is provided by the service provider.
     SIP Server	IP address of the SIP server. Set this parameter to the IP address of the unified gateway.
     Port	Port number of the SIP server. NOTE: If TLS is selected, the default value of this port is 5061. If UDP or TCP is selected, the default value of this port is 5060. If DNS-SRV is selected, the default value of this port is 0.
     Transport	The options are UDP, TCP, TLS, and DNS-SRV. The values UDP, TCP, and TLS are SIP transmission methods, in which TLS indicates encrypted transmission. The value DNS-SRV indicates that an IP phone determines the transfer type (UDP, TCP, or TLS) based on the information in the DNS SRV record sent by the server. NOTE: The value must be the same as the Transporttype value configured for the SIP trunk. If the SIP trunk is not used to route outgoing calls, this parameter is optional.
     DTMF Type	The value of Send DTMF can be INBAND, RFC2833, SIP INFO, or AUTO+SIP INFO. If G711 codec is not adopted, set to via RFC2833.

  3. Click Confirm.

Verification