00 · Header

T7 · SIP, routing, and queues

CUBE deep dive

Gateway SIP and queues T7-R02 PhoneCUBEControl HubPSTN
Illustrated scene for CUBE Deep Dive. Original drawing, not a product screenshot.
Sequence · Phone → CUBE → Control Hub → PSTN PhoneCUBEControl HubPSTN 123
Color-coded sequence: Phone → CUBE → Control Hub → PSTN. A packet moves along the arrows. Reduced motion keeps every step visible.

Dial-peer translation, the G.711 codec class, and the high-CPU signature. Sample passwords from jr1i3r are not here. Retrieved 2026-10-14.

Room T7-R02 Version v0.1 last-verified: TODO Difficulty L4 Est. time 110–140 min Prereq T7-R01 Reading 18 min

01 · Executive summary

Normalize on the dial-peer, then match

  • jr1i3r’s voice class codec 100 allows G.711 only: preference 1 g711ulaw, preference 2 g711alaw. Add another codec only when both sides support it. DSP transcoding is supported and is not in that guide. [cite:1]
  • A voice translation profile is applied on a dial-peer as translation-profile incoming or translation-profile outgoing. The profile can translate called, calling, and redirect-called. 64020 says redirect-called is the redirect DNIS, or the original called number. [cite:2]
  • Test with test voice translation-rule before the profile is on a live peer. The 64020 example is Router#test voice translation-rule 1 5551234. [cite:2]
  • The CUBE dial-peer guide matches a SIP inbound leg on URI classes before incoming called-number and answer-address. Document 211306 is the longer inbound list. This room does not merge the two lists. [cite:3]
  • DS 64224 disables all debugs and uninstalls diagnostic signatures when CPU is at 75 percent or more. The article’s FTP URL contains a sample username and password. Those credentials are not copied here. [cite:1]
Why it matters. People fail this by translating on the wrong peer, or by pasting a sample password from the diagnostic-signature steps.

02 · Architecture map

Where a number changes

Mermaid source (not rendered)
flowchart LR
  Rule --> Test
  Test --> Peer
  Peer --> Webex

03 · Core concepts

Translation profiles and the codec class

Called number changes on the outbound peer

64020 puts translation-profile outgoing on the dial-peer that sends the call. translation-profile incoming applies to the inbound VoIP call. [cite:2]

Thirty-one characters

The same guide says the size of translation-profile incoming is thirty-one characters. A long profile name will not fit that field. [cite:2]

Do not paste a carrier PDF into every router

Cisco’s Lumen Local Gateway PDF prints translation rules for that carrier example, including patterns aimed at Webex Calling and at the PSTN. Those rules are the example. Read them as an illustration of where a profile sits, not as this customer’s dial plan. [cite:4]

ICE is a stun class, not a codec

jr1i3r configures voice class stun-usage 100 to enable ICE on the Webex Calling trunk, separate from the codec class. [cite:1]

Two documents, two jobs

JobCommand the guide showsWhere it sitsCite
Prefer G.711voice class codec 100, then codec preference 1 g711ulaw and 2 g711alawOn the Webex dial-peer as voice-class codec 100[cite:1]
Translatevoice translation-rule, then voice translation-profile with translate called or translate callingdial-peer voice … translation-profile incoming or outgoing[cite:2]
Blockcall-block translation-profile incomingOn the inbound peer, with a cause the guide sets separately[cite:2]
Prove a ruletest voice translation-ruleExec mode, before the peer is trusted[cite:2]
Stop a debug stormcall-home diagnostic-signature load of DS 64224On the Local Gateway, without the sample FTP password[cite:1]

04 · Ecosystem & sister technologies

Glossary, map, sisters, edges

PhoneCUBEControl HubPSTN This room
Mini map of the neighbors named on this room’s sequence. Orientation sketch, not a new product claim.

Glossary

voice class codec 100
jr1i3r’s filter. Preference 1 is g711ulaw. Preference 2 is g711alaw. [cite:1]
Additional codec
The article allows more types when both the originating and terminating systems support them. [cite:1]
DSP transcoding
Supported for more complex designs. Not included in the Local Gateway guide. [cite:1]
voice translation-rule
Global rule set. 64020 defines it before the profile. [cite:2]
voice translation-profile
Binds a translation rule with translate called, translate calling, or translate redirect-called. 64020 says redirect-called is the redirect DNIS, or the original called number. [cite:2]
translation-profile incoming
Number translation for an incoming VoIP call. Name length in that table is thirty-one characters. [cite:2]
translation-profile outgoing
Number translation for the outbound call. [cite:2]
translate called
The profile command that selects the rule for the called number. [cite:2]
translate calling
The profile command for the calling number. [cite:2]
test voice translation-rule
The exec command 64020 prints. Example input 5551234 against rule 1. [cite:2]
call-block translation-profile
A profile used to decide which inbound calls to reject. [cite:2]
URI before called-number
The CUBE dial-peer chapter lists URI class matches ahead of incoming called-number. [cite:3]
211306
The IOS call-routing support document. T7-R01 quotes its full inbound order. This room does not shorten that order to the CUBE chapter’s list. [cite:3]
stun-usage 100
jr1i3r’s ICE class on the Webex trunk. [cite:1]
DS 64224
High-CPU signature. At 75 percent it disables debugs and uninstalls diagnostic signatures. [cite:1]
Sample secret
The DS install steps show an FTP URL with a username and password. This Canon does not store that sample. [cite:1]

Mind map

Mermaid source (not rendered)
mindmap
  root((T7-R02))
    Core
    Sisters

Sister-technology matrix

SisterWhat it isWhy it matters hereConfig touchpointTypical failureCite
Webex Calling trunkThe TLS and SRTP leg jr1i3r builds.Codec class and stun class live on that peer.voice-class codec and voice-class stun-usage.Offering a codec the article did not list, without checking both sides.[cite:1]
PSTN or Unified CM peerThe other dial-peer.Outgoing translation belongs on the peer that faces that destination.translation-profile outgoing.Translating on the inbound peer and wondering why the outbound number is unchanged.[cite:2]
Carrier exampleThe Lumen PDF is one certificate-based Local Gateway example.Its digit rules are not universal.Read section 2.12 as an example.Pasting +1 and 011 rules onto a non-US plan.[cite:4]
IOS call routing211306.Inbound match order is longer than one chapter heading.Read 211306 beside the CUBE chapter.Teaching only called-number match.[cite:3]
Control Hub trunkSource of the registrar, sip-server, and dtg value.Normalization cannot invent the dtg.Copy from the trunk, not from a guide’s sample user.[cite:1]
CertificatesTLS still depends on the trust bundle in jr1i3r.A perfect translation does not fix a bad trustpoint.crypto pki trustpool import of the bundle the article names.Debugging digits during a TLS failure.[cite:1]
RecordingA cloud media service.ICE optimization does not apply when recording needs the cloud. T7-R03 has the ICE article.Do not use a recorded call to prove the stun class.[cite:1]
CPUDS 64224’s trigger.Debugs without the signature can stay on.Install 64224 before a long debug.Copying the sample FTP password into a ticket.[cite:1]

Integration map

FromToMechanismWhat movesCite
INVITEInbound dial-peerURI class, then called numberThe CUBE chapter’s order. 211306 remains the long list.[cite:3]
Inbound peerTranslation profiletranslation-profile incomingCalling and called numbers as the profile says.[cite:2]
Outbound peerNext hoptranslation-profile outgoingThe called number the far end must see.[cite:2]
OperatorExectest voice translation-ruleA sample number in, a rewritten number out.[cite:2]
Dial-peerWebexvoice-class codec 100g711ulaw then g711alaw unless you added a codec both sides support.[cite:1]
Dial-peerWebexstun-usageICE candidates. Media path detail is T7-R03.[cite:1]
High CPUDebugsDS 64224Disable and uninstall at 75 percent.[cite:1]
GuideRouterNothingSample passwords stay in the guide.[cite:1]

Cross-platform bridges

Webex behaviorLegacy habitPeer orientationCite
IOS translation-profileA CUCM translation pattern is a different object. CSS order is not this profile.Peer SBC translation syntax is TODO-verify.[cite:2]
G.711 preference on the Local GatewayWebex App codec lists are not this voice class.Do not claim the phone’s codec screen matches preference 1.[cite:1]
211306 huntCUCM closest-match is a different engine. T7-R01 already separates them.This room does not add an AudioCodes hunt order.[cite:3]

Future-integration hooks

  • Canon plan: T7-R03 takes ICE, NAT, and the port table. This room stops at the dial-peer commands.
  • T7-R04 takes route groups and certificate FQDN checks.
  • If 211306 and the CUBE chapter ever disagree on a step, quote the page you are looking at. [cite:3]

Ecosystem troubleshooting

SymptomLikely sister-system causeCheckFixCite
Outbound number is still untranslatedThe profile is incoming, or it is on the wrong peer.show run of the outbound dial-peer.Move translation-profile outgoing onto the outbound peer.[cite:2]
The profile name is rejectedIt is longer than thirty-one characters.The 64020 size note.Shorten the name.[cite:2]
CPU stays high after a debugDS 64224 is not loaded.show call-home diagnostic-signature.Load DS 64224. Do not use the sample FTP password.[cite:1]
A recorded call is the ICE testRecording is a cloud media service.jr1i3r ICE note, expanded in nt6eyxb.Pick an unrecorded internal call.[cite:1]

05 · Flow

One rewritten called number

StepFromToMechanismNotesCite
1Operatorvoice translation-ruleGlobal configWrite the match and the replace.[cite:2]
2Ruletest voice translation-ruleExecProve one number.[cite:2]
3Profiletranslate called or callingvoice translation-profileBind the rule.[cite:2]
4Inbound peertranslation-profile incomingDial-peerOnly if the inbound leg is what must change.[cite:2]
5Outbound peertranslation-profile outgoingDial-peerCalled-number changes the far end will see.[cite:2]
6Webex peervoice class codec 100Preferenceg711ulaw, then g711alaw.[cite:1]
7Webex peerstun-usage 100ICESeparate from the codec class.[cite:1]
8CPUDS 64224Signature75 percent disables debugs.[cite:1]

06 · Config

Lines, without sample passwords

  1. Create voice class codec 100 exactly as jr1i3r prints it before you add codecs. [cite:1]
  2. Create the translation rule and run test voice translation-rule. [cite:2]
  3. Create the profile. Keep the name inside thirty-one characters. Apply incoming or outgoing on the peer that needs it. [cite:2]
  4. Read the CUBE dial-peer inbound order, then read 211306 before you tell someone called-number is first. [cite:3]
  5. Install DS 64224 from the Diagnostic Signatures Lookup Tool steps in jr1i3r. Omit the sample FTP credentials. [cite:1]
From jr1i3r. No passwords.

voice class codec 100
 codec preference 1 g711ulaw
 codec preference 2 g711alaw

voice class stun-usage 100

From 64020’s shape, with the guide’s own example numbers removed:

voice translation-rule 1
 ! rule lines are yours, then:
voice translation-profile SHORTNAME
 translate called 1

dial-peer voice 200 voip
 translation-profile outgoing SHORTNAME

Router#test voice translation-rule 1 5551234

07 · Limits

Numbers these articles state

ItemValueSourceVerified?
Codec class in the guideg711ulaw then g711alaw[cite:1]Quoted
Translation-profile incoming nameThirty-one characters[cite:2]Quoted
DS 64224 threshold75 percent CPU or more[cite:1]Quoted
Inbound orderURI classes before incoming called-number in the CUBE chapter. 211306 is not collapsed into that sentence.[cite:3]Both documents named
Sample FTP passwordNot copied[cite:1]Omitted on purpose
Other-SBC translation syntaxTODO-verifyNot in these Cisco pagesOpen

08 · Troubleshooting

Failures

SymptomLikely causeEvidenceFixCite
Webex negotiates a codec you did not listYou added it, or the class is not on the peer.voice-class codec on the peer.Stay on the G.711 list unless both sides support the extra codec.[cite:1]
Translation test passes and live calls do not changeThe profile is not on the peer that carries that leg.dial-peer configuration.incoming versus outgoing.[cite:2]
CLI rejects the profile nameLonger than 31 characters.64020 table.Shorten it.[cite:2]
You matched called-number firstA URI class matched earlier.CUBE chapter order, then 211306.Check URI via, request, to, and from before the digits.[cite:3]
Debugs survive a CPU spike64224 is absent.Signature table in jr1i3r. The row name is DS_LGW_CPU_MON75.Load the signature.[cite:1]
A ticket contains the guide’s FTP passwordThe copy command in the article includes a sample user and password.The URL.Remove it. Use the router’s own server.[cite:1]
US +1 rules appear on a non-US trunkThe Lumen PDF was copied.Section 2.12 of that PDF.Write rules for this numbering plan.[cite:4]
ICE “does nothing” on a recorded callCloud recording is outside optimization.jr1i3r and nt6eyxb.Test without recording.[cite:1]
Transcoding was assumed freeThe guide says DSP transcoding is not included in the guide.The sentence under the codec class.Do not promise a transcoder from this page.[cite:1]
huntstop and preference are taught from memoryThey are 211306, quoted in T7-R01.That document.Open 211306 before you change hunt.[cite:3]

09 · Self-question ladder

Twelve rungs

L1What two codecs does voice class codec 100 list first?

g711ulaw, then g711alaw. [cite:1]

L1Where do you put an outgoing translation?

translation-profile outgoing on the outbound dial-peer. [cite:2]

L2How long may the incoming translation-profile name be?

Thirty-one characters. [cite:2]

L2What command proves a rule?

test voice translation-rule. [cite:2]

L2What does DS 64224 do at 75 percent CPU?

It disables all debugs and uninstalls diagnostic signatures. [cite:1]

L3Why is the CUBE chapter not the whole inbound order?

211306 is the longer list. This room does not merge them. [cite:3]

L3When may you add a codec?

When originating and terminating systems both support it. [cite:1]

L3Is DSP transcoding in the Local Gateway guide?

It is supported and not included in that guide. [cite:1]

L4What is stun-usage 100 for?

ICE on the Webex Calling trunk. [cite:1]

L4What is wrong with the FTP line in the DS steps?

It contains a sample username and password. Do not copy them. [cite:1]

L5What is the Lumen PDF for?

One carrier example of translation rules. Not every dial plan. [cite:4]

L5What stays TODO-verify?

Translation syntax on a non-Cisco SBC.

10 · Lab

Paper lab

11 · Quiz

Twelve questions

Q1MCQ

voice class codec 100 preference 1 is:

Answer

g711ulaw. Preference 2 is g711alaw. [cite:1]

Q2MCQ

translation-profile outgoing belongs on:

Answer

The outbound dial-peer. [cite:2]

Q3MCQ

The incoming profile name length is:

Answer

Thirty-one characters. [cite:2]

Q4Scenario

test voice translation-rule succeeds and the PSTN still sees the old number. Why?

Answer

The profile is missing or applied to the wrong direction. [cite:2]

Q5MCQ

DS 64224 fires at:

Answer

75 percent CPU or more, and it disables debugs and uninstalls signatures. [cite:1]

Q6MCQ

The FTP URL in that procedure:

Answer

Includes a sample username and password. Do not copy it. [cite:1]

Q7Scenario

A colleague says inbound match is called-number first. What do you open?

Answer

The CUBE dial-peer chapter, which lists URI classes first, and 211306 for the long order. Do not merge them. [cite:3]

Q8MCQ

DSP transcoding in jr1i3r is:

Answer

Supported, and not included in the guide. [cite:1]

Q9MCQ

stun-usage 100 is:

Answer

The ICE class, not a codec. [cite:1]

Q10Draw

Write the two codec preference lines.

Answer

codec preference 1 g711ulaw and codec preference 2 g711alaw under voice class codec 100. [cite:1]

Q11Scenario

The Lumen PDF’s +1 rule is on a trunk that does not use +1. What is that document?

Answer

A carrier example. It is not this dial plan. [cite:4]

Q12MCQ

Other-SBC translation commands in this room are:

Answer

TODO-verify. These pages are IOS XE and the Local Gateway articles.

12 · Audio

Slots for Studio

Transcript slot

Studio fills this. The prompt is the spoken outline, not a second article.

Transcript slot

Studio fills this. The prompt is the spoken outline, not a second article.

Transcript slot

Studio fills this. The prompt is the spoken outline, not a second article.

13 · Interview

Oral answers

30 seconds. I keep jr1i3r’s codec class on G.711 unless both sides support more, and I put called-number translation on the outbound dial-peer. [cite:1] [cite:2]

2 minutes. I test the rule with test voice translation-rule. The profile name stays inside 31 characters. [cite:2] I do not teach called-number as the first SIP match. The CUBE chapter puts URI classes ahead of it, and 211306 is the longer list. [cite:3] DS 64224 is the 75 percent stop, and I do not repeat the sample FTP password. [cite:1]

30 seconds, ICE. stun-usage is not a codec. Recording is a bad proof of media optimization. [cite:1]

2 minutes, examples. The Lumen PDF shows one carrier’s translation rules. I do not deploy those digit patterns on a different plan. [cite:4]

What you will not say. You will not claim an AudioCodes or Oracle translation syntax.

14 · Citations

Ledger

Retrieved 2026-10-14. Mirrors cites/T7-R02.md.

  1. Configure Local Gateway on Cisco IOS XE for Webex Calling — help.webex — article jr1i3r — help.webex.com article jr1i3r — retrieved 2026-10-14. voice class codec 100 with g711ulaw then g711alaw. Additional codecs only when both sides support them. DSP transcoding supported and not in the guide. voice class stun-usage 100. DS 64224 at 75 percent CPU. Sample FTP credentials are not reproduced.
  2. Configure Number Translation with Voice Translation Profiles — Cisco — cisco.com document 64020 — retrieved 2026-10-14. translation-profile incoming and outgoing. translate called. Thirty-one character profile name. test voice translation-rule. call-block translation-profile incoming.
  3. Cisco Unified Border Element Configuration Guide, Cisco IOS XE 17.6 onwards, Configure Dial Peers — Cisco — cisco.com CUBE dial-peer chapter — retrieved 2026-10-14. SIP inbound match lists URI classes before incoming called-number and answer-address. Understand IOS and IOS XE Call Routing, document 211306, remains the longer order and is not merged into this sentence. document 211306.
  4. Connecting Cisco Webex Calling to Lumen SIP Trunk via a certificate-based Local Gateway on CUBE — Cisco PDF — cisco.com Lumen Local Gateway PDF — retrieved 2026-10-14. Section 2.12 is that carrier’s translation example. Digit patterns are not copied into this room.

15 · Re-engineer later

Open

  • Open questions: whether a later CUBE chapter adds URI via in the same sentence as 211306.
  • Facts still TODO-verify: 1. Non-Cisco SBC translation syntax.
  • Assets missing: a sanitized dial-peer with the password lines removed, audio.
  • Ideas for v1.0: a side-by-side of incoming and outgoing profiles using only 64020’s command names.
  • Next review: jr1i3r, 64020, the CUBE dial-peer chapter, 211306.

Sources and go deeper

Checked links were opened this month. A confirm row has no address because that page was not opened.

sources.json for this page.