💼 Microsoft Teams Entegrasyonu & Direct Routing SBC Gateway 💼 Microsoft Teams Direct Routing & SBC Gateway Integration 💼 Microsoft Teams Direct Routing & SBC-Gateway-Integration

┌─────────────────────────────────────────────────────────────────────────────┐
│                    MICROSOFT 365 CLOUD INFRASTRUCTURE                       │
│                                                                             │
│   [ Teams Desktop ]       [ Teams Mobile (iOS/Android) ]      [ Teams Web ]  │
│           │                               │                        │        │
│           └───────────────────────┬───────┴────────────────────────┘        │
│                                   ▼                                         │
│                 Microsoft Teams Phone System Core                           │
│                                   │                                         │
│                sip.pstnhub.microsoft.com (EU / Primary)                     │
│                sip2.pstnhub.microsoft.com (US / Secondary)                  │
│                sip3.pstnhub.microsoft.com (APAC / Tertiary)                 │
└───────────────────────────────────┬─────────────────────────────────────────┘
                                    │
                                    │  SIP over TLS (Port 5061)
                                    │  SRTP Media (UDP 10000-20000)
                                    │  Trusted CA SSL (Let's Encrypt / DigiCert)
                                    ▼
┌─────────────────────────────────────────────────────────────────────────────┐
│                    AiPBX SESSION BORDER CONTROLLER (SBC)                    │
│                                                                             │
│   FQDN: sbc.yourdomain.com / IP: 212.147.x.x                                │
│   ┌─────────────────────────────────────────────────────────────────────┐   │
│   │ Asterisk 22 PJSIP Signaling & Media Engine                          │   │
│   │  • TLS Transport (Port 5061) - Strict Cipher Suites (AES256/GCM)    │   │
│   │  • SDES-SRTP Audio Transcoding (SILK, Opus, G.711a, G.711u)         │   │
│   │  • Bi-directional SIP OPTIONS Heartbeat Monitoring (60s Keepalive)  │   │
│   │  • E.164 Inbound/Outbound Route Normalization & Dialplan            │   │
│   └──────────────────────────────────┬──────────────────────────────────┘   │
└──────────────────────────────────────┼──────────────────────────────────────┘
                                       │
           ┌───────────────────────────┼───────────────────────────┐
           ▼                           ▼                           ▼
┌─────────────────────┐     ┌─────────────────────┐     ┌─────────────────────┐
│  KURUMSAL DAHİLİLER │     │ ÇAĞRI MERKEZİ & IVR │     │  TELEKOM TRUNK'LAR  │
│  • Yealink/Fanvil   │     │  • ACD Kuyrukları   │     │  • Türk Telekom     │
│  • AiPBX WebRTC Web │     │  • *22/*23 Mola Takip│    │  • Turkcell / Voda  │
│  • Android/iOS Apps │     │  • Ses Kayıt & SLA  │     │  • Alternatif SIP   │
└─────────────────────┘     └─────────────────────┘     └─────────────────────┘

# 1. Microsoft Teams SIP TLS (Port 5061) - Microsoft Subnetleri
sudo ufw allow proto tcp from 52.114.0.0/16 to any port 5061 comment 'MS Teams SIP TLS Primary'
sudo ufw allow proto tcp from 52.112.0.0/14 to any port 5061 comment 'MS Teams SIP TLS Secondary'

# 2. Microsoft Teams SRTP Ses Medyası (UDP 10000-20000)
sudo ufw allow proto udp from 52.112.0.0/14 to any port 10000:20000 comment 'MS Teams SRTP Media'
sudo ufw allow proto udp from 52.120.0.0/14 to any port 10000:20000 comment 'MS Teams Media Relays'

# 3. Güvenlik duvarını yeniden yükle ve durumu incele
sudo ufw reload
sudo ufw status numbered

; ====================================================================
; 1. TLS TRANSPORT TANIMI (PORT 5061 - Microsoft Teams SBC)
; ====================================================================
[transport-tls-msteams]
type=transport
protocol=tls
bind=0.0.0.0:5061
cert_file=/etc/letsencrypt/live/sbc.yourdomain.com/fullchain.pem
priv_key_file=/etc/letsencrypt/live/sbc.yourdomain.com/privkey.pem
method=tlsv1_2
cipher=ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-RSA-AES256-SHA384
verify_client=no
verify_server=yes
require_client_cert=no

; ====================================================================
; 2. MS TEAMS ENDPOINT TANIMI
; ====================================================================
[msteams-trunk]
type=endpoint
transport=transport-tls-msteams
context=from-msteams
disallow=all
allow=alaw,ulaw,opus,g722
direct_media=no
media_encryption=sdes
rtp_symmetric=yes
force_rport=yes
rewrite_contact=yes
trust_id_inbound=yes
send_rpid=yes
send_pai=yes
timers=yes
timers_sess_expires=1800
aors=msteams-aor

; ====================================================================
; 3. MS TEAMS AOR & QUALIFY (OPTIONS Nabız Kontrolü)
; ====================================================================
[msteams-aor]
type=aor
contact=sip:sip.pstnhub.microsoft.com:5061;transport=tls
qualify_frequency=60
qualify_timeout=3.0

; ====================================================================
; 4. IDENTIFY (Gelen Çağrıyı Microsoft IP'leriyle Eşleştirme)
; ====================================================================
[msteams-identify]
type=identify
endpoint=msteams-trunk
match=52.114.148.0, 52.114.132.74, 52.114.75.24, 52.114.76.76, 52.114.7.24, 52.114.14.70, 52.114.16.74, 52.114.20.29, sip.pstnhub.microsoft.com, sip2.pstnhub.microsoft.com, sip3.pstnhub.microsoft.com

; ====================================================================
; 1. MICROSOFT TEAMS'TEN GELEN ÇAĞRILAR (from-msteams)
; ====================================================================
[from-msteams]
; Teams kullanıcısı 3-4 haneli bir dahili çevirdiğinde (Örn: 105)
exten => _[1-9]XX,1,NoOp(Teams -> Dahili Arama: ${CALLERID(num)} -> ${EXTEN})
 same => n,Dial(PJSIP/${EXTEN},30,tTkK)
 same => n,Hangup()

exten => _[1-9]XXX,1,NoOp(Teams -> 4 Haneli Dahili: ${CALLERID(num)} -> ${EXTEN})
 same => n,Dial(PJSIP/${EXTEN},30,tTkK)
 same => n,Hangup()

; Teams kullanıcısı Çağrı Merkezi Kuyruğunu aradığında (Örn: 800)
exten => 800,1,NoOp(Teams -> Destek Kuyrugu)
 same => n,Answer()
 same => n,Queue(destek_kuyrugu,tTkK,,,180)
 same => n,Hangup()

; Teams kullanıcısı PSTN dış hat aradığında (05xx / 02xx / +90...)
exten => _0[2-5]XXXXXXXXX,1,NoOp(Teams -> Telekom Trunk Dis Arama: ${EXTEN})
 same => n,Dial(PJSIP/${EXTEN}@turktelekom-trunk,60,tTkK)
 same => n,Hangup()

; ====================================================================
; 2. AİPBX DAHİLİLERİNDEN TEAMS'E ÇAĞRI GÖNDERME (to-msteams)
; Teams kullanıcılarına tanımlanan E.164 numaralarına rota açılır (+90212XXXXXXX)
; ====================================================================
[to-msteams]
exten => _+.,1,NoOp(AiPBX -> Teams Direct Routing: ${EXTEN})
 same => n,Set(CALLERID(num)=+902129990000) ; Şirket ana numaranız
 same => n,Dial(PJSIP/${EXTEN}@msteams-trunk,60,tTkK)
 same => n,Hangup()

; Kısa kod ile Teams kullanıcısını arama (Örn: 7105 -> +902129997105)
exten => _7XXX,1,NoOp(Dahili -> Teams Kullanicisi 7${EXTEN:1})
 same => n,Dial(PJSIP/+90212999${EXTEN}@msteams-trunk,45,tTkK)
 same => n,Hangup()

# Asterisk modüllerini canlı olarak yeniden yükleyin
sudo asterisk -rx "pjsip reload"
sudo asterisk -rx "dialplan reload"

# Teams Trunk durumunu ve OPTIONS nabzını teyit edin
sudo asterisk -rx "pjsip show endpoints"
sudo asterisk -rx "pjsip show aor msteams-aor"

# ====================================================================
# ADIM 1: Modülü Kurun ve Microsoft 365 Tenant'a Bağlanın
# ====================================================================
Install-Module -Name MicrosoftTeams -Force -AllowClobber
Connect-MicrosoftTeams

# ====================================================================
# ADIM 2: AiPBX SBC Gateway'i Sisteme Tanıtın
# ====================================================================
New-CsOnlinePSTNGateway `
    -Fqdn "sbc.yourdomain.com" `
    -SipSignalingPort 5061 `
    -CodecPriorityList SILK,G711A,G711U `
    -MaxConcurrentSessions 100 `
    -Enabled $true

# ====================================================================
# ADIM 3: PSTN Kullanımını ve Ses Rotalarını (Voice Route) Oluşturun
# ====================================================================
# PSTN Usage etiketi tanımlayın
Set-CsOnlinePstnUsage -Identity Global -Usage @{Add="AiPBX-Local"}

# Tüm giden çağrıları AiPBX SBC'ye yönlendiren ses rotası
New-CsOnlineVoiceRoute `
    -Name "AiPBX-PSTN-Route" `
    -NumberPattern ".*" `
    -OnlinePstnGatewayList "sbc.yourdomain.com" `
    -Priority 1 `
    -OnlinePstnUsages "AiPBX-Local"

# Voice Routing Policy (Ses Yönlendirme İlkesi) oluşturun
New-CsOnlineVoiceRoutingPolicy `
    -Identity "AiPBX-Voice-Policy" `
    -OnlinePstnUsages "AiPBX-Local" `
    -Description "AiPBX Direct Routing Santral İlkesi"

# ====================================================================
# ADIM 4: Kullanıcıya Numara Atayın ve İlkeyi Uygulayın
# ====================================================================
# Kullanıcıya E.164 telefon numarası tanımlayın ve Enterprise Voice açın
Set-CsPhoneNumberAssignment `
    -Identity "[email protected]" `
    -PhoneNumber "+902129991001" `
    -PhoneNumberType DirectRouting

# Kullanıcıya AiPBX ses politikasını bağlayın
Grant-CsOnlineVoiceRoutingPolicy `
    -Identity "[email protected]" `
    -PolicyName "AiPBX-Voice-Policy"

curl -X POST -H "Content-Type: application/json" -d '{
  "type": "message",
  "attachments": [
    {
      "contentType": "application/vnd.microsoft.card.adaptive",
      "content": {
        "$schema": "http://adaptivecards.io/schemas/adaptive-card.json",
        "type": "AdaptiveCard",
        "version": "1.4",
        "body": [
          {
            "type": "TextBlock",
            "text": "📞 AiPBX — Kaçan Çağrı Bildirimi",
            "weight": "Bolder",
            "size": "Medium",
            "color": "Attention"
          },
          {
            "type": "FactSet",
            "facts": [
              { "title": "Arayan:", "value": "+90 532 123 45 67" },
              { "title": "Hedef Kuyruk:", "value": "Destek Kuyrugu (*800)" },
              { "title": "Bekleme Süresi:", "value": "48 saniye" },
              { "title": "Zaman:", "value": "2026-09-18 11:42:15" }
            ]
          }
        ],
        "actions": [
          {
            "type": "Action.OpenUrl",
            "title": "Santralde İncele",
            "url": "https://aipbx.bid/cdr-reports"
          }
        ]
      }
    }
  ]
}' "https://yourtenant.webhook.office.com/webhookb2/..."

# Asterisk konsoluna bağlanın ve PJSIP SIP paket dökümünü açın
sudo asterisk -rvvv
pjsip set logger on

# Yalnızca Microsoft Teams trafiğini filtrelemek için terminalde:
sudo tcpdump -n -i any port 5061 -vv