OC Essential default SBC Onboarding script

This script adds an Operator Connect service for a customer using the Service Providers' SIP Trunk (see Enabling Operator Connect License):

Applies a common Proxy Set for all services configured with specific Carrier Operator (Service Provider SIP Trunk).
Creates an IP Group towards customer side, with tag: "Trunk=<MsTenantId>" and previously configured Operator’s ProxySet and IP Profile.
Creates an IP Group towards Teams OC side, with tag: "Tenant=<MsTenantId>".
If you configure 'Carrier Registration', a rule is added to the Account Table for registration of the new IP Group towards the carrier IP Group.
All numbers uploaded for the customer service are added to the 'OCDialPlan' and are assigned the dial plan tag Trunk={{MsTenantId}} for SBC call leg and Tenant={{MsTenantId}} for the Teams call leg .
Copy
### Script Version OC 1.0 ###
# Onboarding OC Customer with Advanced Settings (IP Groups)

configure voip
 ip-group new
  name "{{CustomerId}}-c"
  proxy-set-name "{{SBC.CarrierID}}" 
  ip-profile-name "{{SBC.CarrierID}}"
  tags "Trunk={{MsTenantId}}"
  classify-by-proxy-set disable
  call-setup-rules-set-id 5
  activate
 exit
 ip-group new 
  name "{{CustomerId}}-t"
  proxy-set-name "Teams-OC"
  ip-profile-name "Teams"
  outbound-mesg-manipulation-set 1 
  always-use-source-addr enable 
  tags "Tenant={{MsTenantId}}" 
  classify-by-proxy-set disable 
  call-setup-rules-set-id 4
  {{#if  SBC.EnableCAC}}    
   cac-profile "{{SBC.CacProfile}}"
  {{/if }} 
  activate 
 exit
 {{#if  SBC.FlagCarrierRegistration}}  
  sip-definition account new
   account-name "{{CustomerId}}"
   served-ip-group-name "{{CustomerId}}-t"
   serving-ip-group-name "{{CustomerId}}-c"
   user-name "{{SBC.CarrierUserName}}"
   password "{{SBC.CarrierPassword}}" 
   host-name "{{SBC.CarrierHostName}}"
   contact-user "{{SBC.CarrierMainLine}}"
   register reg
   application-type sbc
   activate
  exit
 {{/if }}
do write

Edit script and configure the following as required:

Firewall rules: Change the last rule to “Block” once you aligned everything according to your implementation
Quality of Experience settings
Classification Rules
SIP Interface and SIP Trunk source IPs
SIP Trunk Classification and Condition
Update Proxy Set addresses for "SIP Trunk"
Import Certificates (wildcard certificates for SBC can be found at Cert-Center repository). Retrieve the PFX password from the PFX Certificate Repository.
Message Manipulation: Change the value to the FQDN of the Operator Connect SBC.
Add CAC Profiles according to the customer’s needs
Add DNS IPs if required
Add local user account for Live Platform and UMP (see Adding UMP System Operator (Mandatory))
Add CAC Profiles according to the customer’s needs.
Add DNS IP addresses if required.
Enable floating licenses on the SBC as required
Save and Restart the SBC