Solutions · Teams Direct Routing

Teams Direct Routing: bring your own carrier to Microsoft Teams.

Direct Routing is the door Microsoft leaves open for any carrier. It connects Microsoft Teams Phone to the public switched telephone network through a certified SBC and your carrier’s SIP trunks. SIPNEX is the carrier to bring: FCC-licensed trunks feeding your SBC — owned, integrator-run, or hosted — with A-level STIR/SHAKEN on every outbound call and carrier rates instead of per-user calling plans.

How it works

How Teams Direct Routing connects Microsoft Teams to the PSTN.

Teams is Microsoft’s unified communications platform. On its own it has no path to the phone network. Direct Routing adds one. Microsoft describes it as the way to connect your own telephony infrastructure to Microsoft Teams Phone through a supported, customer-provided Session Border Controller. Your carrier’s trunks land on that SBC. Calls then flow in both directions between Teams users and the public switched telephone network, and the same SBC can integrate third-party telephony systems you already run.

The signaling path. Your SBC talks to Microsoft over SIP/TLS on port 5061, and Microsoft forces TLS 1.2 on that interface. The SBC connects to three Microsoft FQDNs in priority order: sip.pstnhub.microsoft.com first, then sip2 and sip3 for regional failover. On the carrier side, the SBC speaks ordinary SIP to SIPNEX trunks. Translating between the two dialects is the SBC’s job.

The media path. Audio runs as SRTP. Without media bypass, it passes through Microsoft’s media processors on UDP ports 3478–3481 and 49152–53247. With media bypass, audio stays between the Teams client and the SBC. Microsoft supports SILK, G.711, G.722, and G.729 between Teams and the SBC. The carrier leg is the same SIP and RTP your existing phone system already uses.

Where Direct Routing fits

Teams has four doors to the phone network.

Microsoft offers four PSTN connectivity options for Teams Phone. Calling Plans make Microsoft your carrier. Operator Connect uses a program-enrolled carrier that you manage from the Teams admin center. Teams Phone Mobile ties the Teams number to a mobile SIM. Direct Routing is the only one where any PSTN operator qualifies. Microsoft supports mixing all four within one tenant.

CAPABILITY DIRECT ROUTING CALLING PLANS / OPERATOR CONNECT
Carrier choice Any PSTN carrier Microsoft, or program-enrolled operators only
Per-minute economics Carrier rates you negotiate Per-user plans / operator bundles
Local survivability (SBA) Supported Not available
Analog devices & legacy PBX interop Via ATAs behind the SBC Not the designed path
Infrastructure Certified SBC (yours, an integrator’s, or DRaaS) None customer-managed
Attestation control Your carrier’s — SIPNEX signs A-level Whatever the plan provides
The three pieces

What a Direct Routing deployment needs.

1. Teams Phone licensing. Each user needs Teams Phone — the Teams Phone Standard add-on on Business/E3-class plans, or included with Microsoft 365 E5. With Direct Routing, Microsoft requires no additional calling license. PSTN costs move to your carrier, which is the point.

2. A certified SBC. Microsoft certifies border controllers, not carriers. AudioCodes, Ribbon, Oracle, and Cisco CUBE anchor the certified list; TE-SYSTEMS anynode, Avaya, and Nokia are on it too. Own one, let your integrator run one, or consume Direct-Routing-as-a-Service — Microsoft sanctions all three models. It supports Direct Routing only with certified SBCs on certified firmware.

3. Carrier trunks. The piece SIPNEX supplies: SIP trunks with unlimited concurrent channels, DIDs and toll-free numbers from carrier inventory, number porting handled, and every outbound call signed at A-level under our own STIR/SHAKEN certificate. It is the bring-your-own-carrier model, applied to Teams.

Existing systems

Connect an existing PBX and telephony infrastructure to Microsoft Teams Phone.

Direct Routing is not only for greenfield tenants. Microsoft lists integration with third-party PBXs and analog devices as a core reason to choose it. The certified SBC sits between Teams, your existing PBX, and the carrier trunk. Teams users and extensions still on the old PBX reach each other through the SBC, and both sides can share the same carrier trunks.

Analog devices stay. Elevator phones, door boxes, overhead paging, and fax lines connect through analog telephone adapters behind the SBC. Microsoft publishes a verified-interoperability list for analog devices — AudioCodes ATAs, the Cisco ATA 191, and Ribbon EdgeMarc gateways are on it. Operator Connect and Calling Plans are not designed for this path — there is no SBC to hang the ATAs on.

A phased migration. Microsoft’s own example pattern runs Calling Plan or Operator Connect for everyday PSTN calling and Direct Routing for third-party PBXs, analog devices, and specialized routing. So you can move users to Teams in waves. Your existing phone numbers port to the carrier once, and the SBC routes each number to Teams or to the old PBX. Nothing forces a flag day.

Deployment

Teams Direct Routing setup, step by step.

Microsoft’s planning guide breaks a Direct Routing deployment into six steps. Each step is explained below in practical terms, with the carrier’s part marked.

  1. Confirm licensing and infrastructure. Every user needs Teams and Teams Phone and must be homed online in Microsoft 365. Direct Routing is not supported in Islands mode; users need Teams Only mode so calls land in the Teams client.
  2. Pick a certified SBC. Choose from Microsoft’s certified list and decide who runs it: you, an integrator, or a DRaaS provider. Microsoft recommends setting a maximum call limit on the SBC, taken from the SBC’s own documentation, so it alerts at capacity. Size that limit to the trunk capacity you order.
  3. Prepare DNS, certificate, and firewall. The SBC needs a public FQDN on a domain verified in your Microsoft 365 tenant — never *.onmicrosoft.com — and a certificate from a CA in the Microsoft Trusted Root Program. Open SIP/TLS to 5061 and the media ranges toward Microsoft’s 52.112.0.0/14 and 52.120.0.0/14 blocks.
  4. Pair the SBC with Teams. Use the Teams admin center under Voice → Direct Routing, or New-CsOnlinePSTNGateway in PowerShell. Pairing is proven when SIP OPTIONS get a 200 OK in both directions.
  5. Configure voice routing. Create PSTN usages, voice routes (a number pattern plus the SBCs that serve it), and a voice routing policy, then assign the policy to users. Give each user a Direct Routing number with Set-CsPhoneNumberAssignment; Microsoft recommends full E.164 format.
  6. Validate, then expand. Test inbound and outbound calls, emergency calling if configured, and failover between Microsoft’s SIP connection points. Then roll out in waves.

SIPNEX’s part sits under steps 2 through 5: trunk credentials the SBC points at, DIDs and toll-free numbers, porting your existing numbers, and A-level signing on the outbound leg. The SBC and the Teams tenant stay under your control.

Resilience

Survivability, media bypass, and emergency calling.

Survivable Branch Appliance. Only Direct Routing offers local survivability. The SBA is Microsoft code that SBC vendors embed in their firmware or run as a separate appliance. When a site loses its internet link, Teams desktop clients on Windows and macOS, and Teams Phones, switch to the SBA automatically. Users keep making and receiving PSTN calls through the local SBC, with hold, resume, blind transfer, and call forwarding still working. Media bypass must be configured for it to work.

Media bypass. Media bypass keeps audio between the Teams client and the SBC instead of looping it through a Microsoft datacenter. Microsoft recommends it when users sit on the same network as the SBC. It uses ICE on the client and ICE Lite on the SBC. You switch it on per SBC with the MediaBypass setting on the online PSTN gateway.

Emergency calling. Dynamic emergency calling works with Direct Routing, but it needs more setup than the Microsoft-managed options. The SBC must be flagged as supporting PIDF/LO so location data rides in the emergency INVITE. Then you either connect an Emergency Routing Service provider — Microsoft certifies Bandwidth, Intrado, and Inteliquent — or configure the SBC for ELIN. An emergency call routing policy, which applies only to Direct Routing, defines the emergency numbers and their PSTN route.

Mixed tenants

Where Direct Routing fits in a mixed Teams tenant.

Microsoft’s planning guide gives an example of one tenant using every connectivity option at once. The pattern is instructive: the requirement-heavy workloads land on Direct Routing.

USER TYPE PSTN CONNECTIVITY WHAT DRIVES THE CHOICE
Knowledge workers Operator Connect Standard office calling, managed in the Teams admin center
Frontline and mobile workers Teams Phone Mobile One number on the mobile SIM and in Teams
Contact centers Direct Routing Advanced voice routing and carrier choice
Analog devices and legacy PBXs Direct Routing ATAs and PBX interop behind the SBC
Small satellite offices Microsoft Calling Plan Simplest deployment, Microsoft as the carrier

The contact-center row is the one that matters most for a carrier like SIPNEX. Campaign traffic does not belong on Teams seats; it belongs on dialer-grade trunks. A Direct Routing carrier that also runs dialer trunks gives you one carrier for both, with the same A-level signing on both.

Picking the carrier

How to choose a Direct Routing carrier or partner.

The SBC decides whether calls flow. The carrier decides what they cost and how they’re trusted. Four questions sort any candidate.

First, what are the per-minute rates at your actual volume — and are they published? Second, who signs your outbound calls, and at what attestation level? Third, how fast do numbers provision, and does porting run in parallel with your rollout? Fourth, when a call sounds wrong, can support read the SIP trace — or only open a ticket with someone who can?

Direct Routing exists so those answers can come from a carrier you chose on merit, not from whichever operator a program enrolled. SIPNEX puts its carrier rates on the pricing page, signs at A-level under its own STIR/SHAKEN certificate, and is registered in the FCC’s Robocall Mitigation Database.

Frequently asked

About Teams Direct Routing with SIPNEX.

What is Direct Routing in Microsoft Teams?
Direct Routing is Microsoft’s bring-your-own-carrier option for Teams Phone. Your PSTN calls flow through a Microsoft-certified Session Border Controller (SBC) connected to the SIP trunks of a carrier you choose. Microsoft provides the phone system; the SBC bridges it to your carrier; the carrier handles calls, numbers, and rates. It is the most flexible of Teams’ PSTN options — and the only one where the carrier decision is fully yours.
Does my SIP carrier need to be certified by Microsoft?
No. Microsoft certifies the SBC — the hardware or software border controller — never the carrier. Microsoft’s own documentation states that with Direct Routing “you can use any PSTN operator”: any carrier’s trunks connected to a certified SBC are supported. That is exactly why Direct Routing exists — so carrier choice stays open.
What do I need to run Direct Routing?
Three things. First, a Teams Phone license per user (Teams Phone Standard as an add-on, or included with Microsoft 365 E5). Second, a Microsoft-certified SBC — AudioCodes, Ribbon, Oracle, and Cisco CUBE are common choices — owned by you, run by your integrator, or consumed as Direct-Routing-as-a-Service. Third, SIP trunks from the carrier of your choice. SIPNEX supplies that third piece: the trunks, the numbers, and the attestation.
Do I have to own an SBC?
No. Microsoft explicitly allows the certified SBC to be “procured, installed, and managed by you, your integrator, or a Direct-Routing-as-a-Service (DRaaS) provider.” Many deployments consume a hosted SBC from an integrator and simply point carrier trunks at it. You get Direct Routing’s carrier freedom without operating border infrastructure.
Which SBC vendors are certified for Teams Direct Routing?
Microsoft’s certified list is long. AudioCodes, Ribbon, Oracle, and Cisco CUBE are common picks; TE-SYSTEMS anynode, Avaya, Metaswitch, Nokia, Mitel, and several hosted SBC services are certified too. Certification is granted to specific firmware versions, and Microsoft supports Direct Routing only through certified devices. Microsoft is not accepting new certification nominations until further notice, so the list is effectively fixed for now. SIPNEX trunks are plain SIP, so the SBC choice is yours.
What’s the difference between Direct Routing and Operator Connect?
Operator Connect is the managed version. A carrier enrolled in Microsoft’s program runs everything and appears natively in your Teams admin center — simpler, but limited to enrolled operators. Direct Routing works with any carrier through an SBC. It is the only option with local survivability (via a Survivable Branch Appliance) and analog-device integration.
Can Teams Direct Routing connect an existing PBX and analog devices?
Yes. Microsoft names integration with third-party PBXs and analog devices as a reason to choose Direct Routing. Its reference architecture shows the certified SBC linking Teams Phone, an existing PBX, analog devices, and the carrier’s SIP trunks. Analog phones connect through ATAs behind the SBC, and Microsoft publishes a verified list of them. This is how organizations move to Teams in phases instead of on one flag day.
What ports and FQDNs does Direct Routing use between the SBC and Microsoft?
Signaling is SIP over TLS 1.2. The SBC sends to port 5061 on sip.pstnhub.microsoft.com, with sip2 and sip3.pstnhub.microsoft.com as failover, and listens on the port you configure. Media is SRTP on UDP 3478–3481 and 49152–53247 to and from Microsoft’s media processors. Both resolve into Microsoft’s 52.112.0.0/14 and 52.120.0.0/14 ranges. Microsoft asks you to allow the whole ranges, not just the addresses DNS returns.
How does emergency calling work with Teams Direct Routing?
Dynamic emergency calling is supported, but Direct Routing has extra prerequisites. The SBC must be marked as supporting PIDF/LO so the caller’s location travels in the emergency INVITE. You also need either a connection to an Emergency Routing Service provider — Microsoft certifies Bandwidth, Intrado, and Inteliquent — or an ELIN configuration on the SBC. An emergency call routing policy, which applies only to Direct Routing users, sets the emergency numbers and their PSTN route. Direct Routing customers in the United States test through their ERS provider rather than the 933 test number.
Do we keep our phone numbers when moving to Teams Direct Routing?
Yes. Numbers port to the Direct Routing carrier through the standard LNP process while service continues, then appear in Teams once routing is configured. Moving from Calling Plans or another carrier to SIPNEX trunks is a porting event plus SBC configuration — not a number change.
Why does the carrier behind Teams matter?
Because Teams only handles the app layer. The carrier determines per-minute rates, concurrent capacity, number inventory, and how outbound calls are signed under STIR/SHAKEN. SIPNEX signs at A-level with its own certificate, which follows your calls into Teams. A Teams deployment inherits whatever trust and economics its trunk layer provides.

Put a real carrier under your Teams tenant.

Tell us your seat count, your SBC situation — owned, integrator, or none yet — and your monthly minutes. You get trunk credentials and a porting plan within one business day.

Or call direct: (833) 665-2220