How To Successfully ImplementIP Video

EDUCAUSE 2002

OCTOBER 2, 2002

ALAN STILLERMAN

ED STOCKEY

Copyright Alan Stillerman and Ed Stockey, 2002. This work is the intellectual property of the author. Permission is granted for this material to be shared for non-commercial, educational purposes, provided that this copyright statement appears on the reproduced materials and notice is given that the copying is by permission of the author. To disseminate otherwise or to republish requires written permission from the author.

AGENDA

• HISTORY AND BACKGROUND

• QUALITY OF SERVICE (QoS)

• FIRE WALLS & PROXYS

• GATEKEEPERS/GATEWAYS

• DIAL PLAN

• CODECS

• DIRECTORY SERVICES

• REGISTRATION/SCHEDULING

IHETS: Basics• Indiana Higher Education

Telecommunication System• Consortium of all accredited public and

private postsecondary institutions in Indiana

• Created by enabling legislation in 1967• INDNET begun 1995

• IHETS becomes Manager of the Indiana Telecommunications Network 1997

• ITN serves all public institutions – this includes:

Higher Education, K-12 schools, Public Libraries,

State, County and Local government• Total Sites Connected to ITN > 1,700

Muncie

ITNNetwork

Topology

Fort Wayne

Portage

South Bend

Lafayette

Evansville

Bloomington

Columbus

Richmond

AT&T POP(Aggregration)

Indianapolis

IHETSCore Network

OC-3

BACKGROUND

• TWO-WAY INTERACTIVE VIDEO

– H.323 – IP VIDEO 2001• MCU TESTING – FALL 2000

RESULT: THEY ACTUALLY WORK!!

• RECOMMENDATION: Accord MGC 100

• NEED TO LOOK AT THE VARIOUS ISSUES AND COMPONENTS NEEDED TO IMPLEMENT H.323 ON THE NETWORK – IP VIDEO TASK FORCE

QoS (Quality of Service)

• What is QoS– Set of techniques to manage network

resources which enables the network to differentiate and handle traffic based on policy

• Why implement QoS– Provide consistent, predictable data

delivery by managing delay(latency), delay variation(jitter), bandwidth and packet loss

• Bandwidth is not the complete solution

Quality of Service

• Challenges providing QoS for IP video– Head of line blocking (HOLB)– IP video uses UDP (universal datagram

protocol) for transport of video and only uses TCP for control data – cannot resend lost video packets

– Video uses large, variable length packets

Video Conferencing Traffic Packet Size Breakdown (CIF)

37%1025-1518 Bytes

20%513-1024 Bytes

34%129-256 Bytes

1%65-128 Bytes

8%257-512 Bytes

384 kbps Video Call

VVT-2302917_05_2001_c1 ©2001, Cisco Systems, Inc. All rights reserved

Video Data Rate + 20% = Bandwidth Required

Video Data Rate + 20% = Bandwidth Required

128kbps = 153kbps

384kbps = 460kbps

512kbps = 614kbps

768kbps = 921kbps

1.5Mbps = 1.8Mbps

Video Voice Data Routingetc.

Video Data RateBW Required

Provisioning

< 33% of Link Capacity< 33% of Link Capacity

< 75% of Link Capacity

Link CapacityLink Capacity

“Recommendations”

VVT-2302917_05_2001_c1 ©2001, Cisco Systems, Inc. All rights reserved

Quality of Service - Approaches

• Big Pipes

• QoS

• Both

QoS – How We Do It

• ACLs (access control lists)– to identify traffic and set IP

precedence. For video and/or voice precedence is set to 5.

• Service policies push traffic into:– Low latency queuing (Priority

queue)– Reserve bandwidth for RAS– Data queues which use RED

• Caveat – hardware limitations –

example: Cisco 25xx routers

QoS

• Bandwidth guarantees for a

T1 (1.544 Mbps):

• 512 kb/s for video

• 128 kb/s for voice

• 64 kb/s for SNA

• Remainder for everything else

FIRE WALLS

• Used to block traffic by disabling ports that allow traffic to come in to a users intranet.

• Usual strategy– Incoming: Block everything coming

in. Open ports only as necessary based on need.

– Outgoing: Allow everything.• H.323 Video requires the following

ports to be open in both directions to allow for optimal two way videoconferencing.– 1718, 1719, 1720

PROXYS• Allows a user to be anonymous

to the outside world.

• Acts as a filter for incoming traffic.

• Requires a proxy server on both sides of firewall for H.323 video

IP H.323

IP H.323

IHETS core gatekeeper runningproxy7200

InstitutionalGatekeeper

RunningProxy

Workstation

GG

GG

Edge Router

Edge Router

Codec must have astatic address.

Firewall allows allincoming H.323 traffic

to specified codec

Codec registers withIHETS coregatekeeper

Codec registers withinstitutionsgatekeeper

Firewall allows allH.323 traffic incoming

from IHETS coregatekeeper

Edge Router

IP H.323

Firewall and Proxy setupsfor IP Videoconferencing

FIRE WALLS

• Tested and Certified – CISCO PIX 6.2

• Currently Being Tested– Checkpoint – Gauntlet – Cisco IOS Firewall– Firebox– Linux Firewalls

• Firewalls that will not work with H.323– Novell Border Manager

Difference between Gatekeepers and Gateways

• Gatekeeper– IP based– Address Resolution –

Layer 3– Bandwidth Management

• Call Admission Control (CAC)

– Call forwarding– Technology Prefixes– Exist in hierarchies

• Gateway– Can transcode

between ISDN, ATM and IP

– Address Resolution – Layer 2

Limitations of Gatekeepers

• 4 Levels of Hierarchies

• Can have no more than 6 Forwarded Location Requests (LRQ) without effecting latency

IP Video Gatekeeper Hierarchy

• Institutional Gatekeepers– 2 levels of hierarchy

• Gatekeepers located on node routers

• IHETS Directory Gatekeeper

• National Gatekeeper

• International Gatekeeper

UNC - CHIHETSOSU

IHETS

GG

GG

GG GG GG

GG

GG

GG

IHETS Connectionto InternationalGatekeepers

Radvision

Cisco

Cisco

Cisco

Radvision

Radvision

Radvision

Radvision

Why Do We Need A Dial Plan?

• To support legacy ISDN and ATM codecs

• To enable a seamless connection between codecs in various parts of the state and across the nation

• To let people off net to be able to call IP codecs on net (Inbound calls)

• USER FRIENDLY

INDnet Dial Plan• E[T]ZZZNNNNNNN

• E = Exit Zone Prefix. “1” (Optional)

• T = Technology Prefix (Optional)

• ZZZ = Area Code

• NNNNNNN = Seven digit E.164 number

• Based on North American Numbering Plan (NANP)

Dial Plan

• Dialing between all protocols supported

• 10 digit E.164 number required in order to register with IHETS core gatekeeper

• First three numbers must match a valid area code as defined by NANP

• Next seven digits can be either: a user defined number or a valid seven digit Direct Inward Dial (DID) number such as the phone number on their desk

Dial Plan

• Seven digit number on desk ensures uniqueness of 10 digit number within an area code

• Technology prefix required in order to dial off net to ISDN endpoint

• Automatically scales to national and international dial strings based on E.164

• Allows for future migration to ENUM standard when implemented

Fort Wayne

Portage

South Bend

Lafayette

Evansville

Bloomington

Columbus

Richmond

GGInstitutionalGatekeeper

GG

812 ZoneGatekeeper

GGInstitutionalGatekeeper

GG 219 ZoneGatekeeper

GG

574 ZoneGatekeeper

GG

260 ZoneGatekeeper

InstitutionalGatekeeper

G

InstitutionalSub-gatekeeper

GInstitutional

Sub-gatekeeper

G

InstitutionalGatekeeper

G

InstitutionalSub-gatekeeper

G

InstitutionalSub-gatekeeper

G

Main DirectoryGatekeeper

Cluster

Institution'sClient Terminal

Institution’s ClientTerminal

Institution’s ClientTerminal

Institution’s ClientTerminal

InstitutionalGatekeeper

G

InstitutionalSub-gatekeeper

GInstitutional

Sub-gatekeeper

G

Client Terminal

Client Terminal

Client Terminal

Client Terminal

219

574

260

765

317

812

GG

GG317 Zone

Gatekeeper

MuncieGG765 Zone

Gatekeeper

InstitutionalGatekeeper

G

InstitutionalSub-gatekeeper

GInstitutional

Sub-gatekeeper

G

ISDN

Workstation

Client(IP)

Client(IP)

Accord MCUIP

ISDNATM

36 Ports

RadvisionGateway

Radvision3510MCU

Gatekeeper

Gatekeeper

IHETS IP Video

TechnologyTopology

IHETS MainDirectory GK

Cluster

PRI

I2

Internet

IPATM connectionto ITN

IP connectionto ITN

IHETS

Client(ATM)

GG

RAS setup forgatekeeper

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

Net MPIMG32

3Video MUX Video Video

AUDIO

AUDIO

DATAData Audio Audio

L1L2

L3

Power

PWR

INOUT

PWR

INOUT

PWR

INOUT

MGC-100

GG

Workstation

United StatesGatekeeper

GG

RAS

GG

ATM to IP On NETIHETS

Legend

OC 155ATM 25

Accord MGC-100

VIDEOSERVER

Ezenia 2000 ATM MCS

ATMH.321

7206 VXRGatekeeper

T1 10/100 Mbps

IP H.323

3 Com3300

Switch

V-Gate

V-Gate 4000

VIDEOSERVER

Ezenia 2000 ATM MCS

V-Gate

V-Gate 4000

GG

LS 1010

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

Net MPIMG323

Video MUX Video VideoAUDI

OAUDI

ODATAData AudioAudio

L1L2L3

Power

PWRIN

OUT

PWRIN

OUT

PWRIN

OUT

MGC-100

SuperStac k 3R

6 x

1 8 x

1 x

1 3 x

7 x

1 9 x

1 2 x

2 4 x

gr eenf lashing gr een

= enabled, link O K= disabled, link O K

3

3

4

4

6

6

5

5

7

7

8

8

9

9

10

10

11

11

12

12

1

1

2

2 3

5

1

4

7

6

8

2

13

13

14

14

15

15

16

16

17

17

18

18

19

19

20

20

21

21

22

22

23

23

24

24

Power / Self Test

Packet

St at us

Packet

St at us

1 0 BASE-T/1 0 0 BASE-TX 1 0 0 0 BASE-SX Un i t Switc h 3300 SM

3C16987A

Prepared by Alan Stillerman

ISDN off net to IP andATM Multiconference

IHETS

Legend

OC 155ATM 25

Accord MGC-100

VIDEOSERVER

Ezenia 2000 ATM MCS

ISDNH.320

7206 VXRGatekeeper

T1 10/100 Mbps

IP H.323

3 Com3300

Switch

3510MCU

3510MCU

PRI

PRIPRI

PRI

ISDN PRI

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

STBYFAIL

ACTIVE

Net MPIMG323

Video MUX Video VideoAUDI

OAUDI

ODATAData AudioAudio

L1L2L3

Power

PWRIN

OUT

PWRIN

OUT

PWRIN

OUT

MGC-100

V-Gate

V-Gate 4000

ISDN

VIDEOSERVER

Ezenia 2000 ATM MCS

V-Gate

V-Gate 4000RadvisionGateway

GG

LS 1010

SuperStack 3R

6 x

1 8 x

1 x

1 3 x

7 x

1 9 x

1 2 x

2 4 x

gr eenf lashing gr een

= enabled, link O K= disabled, link O K

3

3

4

4

6

6

5

5

7

7

8

8

9

9

10

10

11

11

12

12

1

1

2

2 3

5

1

4

7

6

8

2

13

13

14

14

15

15

16

16

17

17

18

18

19

19

20

20

21

21

22

22

23

23

24

24

Power / Self Test

Packet

St at us

Packet

St at us

1 0 BASE-T/1 0 0 BASE-TX 1 0 0 0 BASE-SX Un i t Switch 3300 SM

3C16987A

Prepared by Alan Stillerman

ATMH.321

Common Failures of Video Calls

• Unit has not been rebooted for several days

• PC NIC is not set for 100 Mbps – Full Duplex

• LAN/WAN is not set for 100 Mbps – Full Duplex

• Video call is not set up through a gatekeeper

• Gatekeeper not properly configured

• ISDN Cloud

• Internet Cloud

• CSMA/CD on 10 Mbps – Half Duplex

Codec Recommendations

• That a vendor have both a desktop (PC based) and a room system in their product line

• Support interoperability

• Ease of Support

• Financial considerations

• Based on IPVTF

Codec Recommendations• Room Systems

– Polycom Viewstation FX (Appliance Based)

– VCON Media Connect 8000 (PC Based)

• Desktop Systems (PC Based)– Polycom ViaVideo– VCON ViGO

• Based on IPVTF

DIRECTORY SERVICESClick To MeetTM

• Connects Point-to-Point any protocol– IP – ATM, IP – ISDN, ATM - ISDN

• Creates multipoint conferences on the fly

• Can schedule Point-to-Point or multipoint conferences in the future

• Sends out e-mails notifying end users of upcoming meetings

• Can program all calls to go through a gateway or bridge

DIRECTORY SERVICESClick To MeetTM

• Continuous presence built in

• Will handle streaming media

• Supports firewall NAT/proxy/VPN transversal

• Connects to a gatekeeper

• Version 3 uses Microsoft’s Active Directory for user accounts– LDAP support provides the capability

to support connectivity to external, 3rd party data stores like Novell’s eDirectory, Sun ONE Directory Server (formerly iPlanet LDAP Server) and Netscape’s Directory Server

Dialing Made Simple

Courtesy First Virtual Communications, Inc.

Scheduling Made Simple

Courtesy First Virtual Communications, Inc.

REGISTRATION AND CERTIFICATION

• http://www.ihets.org/network/ipvideo/ctm/index.html

• Allows QoS to be enabled on the edge and core routers

• Provides data for directory entry

• Verified by Point-to-Point and multipoint test calls

How To Reach Us

Ed StockeyAssistant Director, Product

Researchestockey@ihets.org

317-263-8943

Alan StillermanSenior Product Research Analyst

astiller@ihets.org317-263-8888