Microsoft Skype for Business

 Download PDF File
9.0

Table of Contents

1.1Microsoft Skype for Business 2015

1.2Document Purpose

1.3Prerequisites

3.1Disable SNAT Globally

3.2Change Drop Connections Settings

3.3Increase the Connection Timeout

3.4Connection Scaling For Large Scale Deployments

3.5Enable Subnet Originating Requests Globally

5.1DNS Only Configuration without Templates

5.1.1Director Internal WebSvc HTTPS Virtual Service

5.1.2Director Internal WebSvc HTTP Virtual Service

5.1.3Front End Internal WebSvc HTTPS Virtual Service

5.1.4Front End Internal WebSvc HTTP Virtual Service

5.2HLB Only Configuration without Templates

5.2.1Director Internal WebSvc HTTPS Virtual Service

5.2.2Director Internal WebSvc HTTP Virtual Service

5.2.3Front End Internal WebSvc HTTPS Virtual Service

5.2.4Front End Internal WebSvc HTTP Virtual Service

5.2.5Internal Front-End SIP Virtual Service

5.2.6Internal Front-End DCOM Virtual Service

5.2.7Director SIP Virtual Service

5.2.8Mediation Virtual Service

5.2.9Edge Internal AV Media TCP Virtual Service

5.2.10Edge Internal AV Media UDP Virtual Service

5.2.11Edge Internal SIP Virtual Service

5.3Configure External Edge Virtual Services without Templates

5.3.1Edge External SIP Virtual Service

5.3.2Edge External SIP Federation Virtual Service

5.3.3Edge External XMPP Virtual Service

5.3.4Edge External Conferencing Virtual Service

5.3.5Edge External AV Media TCP Virtual Service

5.3.6Edge External AV Media UDP Virtual Service

5.4Common to Both without Templates

5.4.1Office Web App Servers Virtual Service

5.4.2Director Reverse Proxy HTTP Virtual Service

5.4.3Director Reverse Proxy HTTPS Virtual Service

5.4.4Front End Reverse Proxy HTTP Virtual Service

5.4.5Front-End Reverse Proxy HTTPS Virtual Service

6.1DNS Configuration with Templates

6.1.1Director DNS

6.1.2Front End DNS

6.2HLB Only Configuration with Templates

6.2.1Director HLB Only

6.2.2Front End HLB Only

6.2.3Mediation Virtual Service

6.2.4Internal Edge HLB Only

6.3Configure External Edge Virtual Services with Templates

6.3.1Edge External HLB Only

6.3.2Edge External Conferencing

6.3.3Edge External AV HLB Only

6.4Common to Both with Templates

6.4.1Office Web App Servers Virtual Service

6.4.2Director Reverse Proxy

6.4.3Front End Reverse Proxy

7.1Server Maintenance

7.2Loss of Failover while using DNS

7.3Hardware Load Balancing

 

1Introduction

KEMP’s LoadMaster family of purpose-built hardware and Virtual LoadMasters (VLMs) offer advanced Layer 4 and Layer 7 server load balancing, content switching, SSL Acceleration and a multitude of other advanced Application Delivery and Optimization (ADC) features.

KEMP’s LoadMaster fully supports Microsoft’skey solutions and are approved by Microsoft. The LoadMaster efficiently distributes user traffic for Microsoft Skype for Business 2015 so that users get the best experience possible.

The entire KEMP LoadMaster product family, including the Virtual LoadMaster (VLM) supports Microsoft Skype for Business 2015.

For more information about KEMP Technologies, visit us online at www.kemptechnologies.com.

1.1Microsoft Skype for Business 2015

Microsoft Skype for Business 2015 is a communications tool which provides services such as audio/video conferencing, Instant Messaging (IM) and Voice over Internet Protocol (VoIP). These services can all be accessible from the Internet, or from an internal network. Microsoft Skype for Business 2015 allows companies to enhance collaboration amongst employees.

A number of enhancements have been made in Microsoft Skype for Business 2015. The network topology setup is quite similar to the previous version (Lync 2013) but with a number of small differences. The Director role is still optional and is not recommended. Less servers are needed because front-end servers can now take the role of Director. A new role has been added called the Video Interoperability Server (VIS) which acts as an intermediary between third party teleconference systems and the Skype for Business 2015 deployment.

1.2Document Purpose

This documentation is intended to provide guidance on how to configure KEMP LoadMaster products to provide High Availability (HA) for a Microsoft Skype for Business 2015 environment. This documentation is created using a representative sample environment described later in the document. As this documentation is not intended to cover every possible deployment scenario it may not address unique setup or requirements. The KEMP Support Team is available to provide solutions for scenarios not explicitly defined.

1.3Prerequisites

It is assumed that the reader is a network administrator or a person otherwise familiar with networking and general computer terminology. It is further assumed that the Microsoft Skype for Business 2015 environment has been set up and the KEMP LoadMaster has been installed.

Other LoadMaster documentation can be referred to as needed from http://kemptechnologies.com/documentation.

The minimum requirements that should be met before proceeding are as follows:

  • LoadMaster firmware version 7.1 or above should be installed
  • Configured and published Microsoft Skype for Business 2015 architecture with Skype for Business Topology builder
  • Installed the Microsoft Servers, Active Directories and followed other Microsoft requirements
  • Configured internal and external DNS entries for Front-End, Director and Edge pools
  • Established access to the LoadMaster Web User Interface (WUI)

2Load Balancing Microsoft Skype for Business 2015

Figure 2‑1: Skype for Business 2015 Network Topology

Deploying a Microsoft Skype for Business 2015 environment can require multiple servers in Front-End pools and Edge server pools. Load balancing is necessary in this situation to distribute the traffic amongst these servers.

Microsoft Skype for Business 2015 supports two load balancing solutions: DNS load balancing and Hardware Load Balancing (HLB). Hardware load balancers are also required to provide load balancing for the internal and external web services when DNS load balancing is used.

Different load balancing methods cannot be used on the Edge internal and Edge external interfaces, that is, DNS load balancing cannot be used on the Edge internal interface when hardware load balancing is being used on the Edge external interface. Health checking at the LoadMaster ensures that, if one of the servers becomes inaccessible, the load balancer will take the sever offline and automatically re-route and reconnect users to other functioning servers.

KEMP Technology recommend the configuration as depicted in Figure 21. If your configuration differs from the recommended configuration and there are issues deploying the LoadMaster, please contact the local KEMP Support Team for assistance.

3General Configuration

Some recommended general LoadMaster configuration settings are outlined below. These options can be set within the LoadMaster WUI.

3.1Disable SNAT Globally

By default, global Server Network Address Translation (SNAT) is enabled in the LoadMaster settings. KEMP recommends disabling SNAT globally when using the LoadMaster with a Skype for Business 2015 environment. To disable SNAT globally, follow the steps below:

  1. In the main menu, select System Configuration.
  2. Select Miscellaneous Options.
  3. Select Network Options.

Figure 3‑1: Disable SNAT globally

  1. Remove the check from the Enable Server NAT check box.

3.2Change Drop Connections Settings

The LoadMaster must be configured to drop connections on Real Server Failure to have fast failover for clients to another Real Server.

  1. To configure dropping connections, click System Configuration.
  1. Click Miscellaneous Options.
  2. Click L7 Configuration.

Figure 3‑2: Enable Drop at Drain Time End option

  1. Select the Drop Connections on RS failure checkbox.

3.3Increase the Connection Timeout

The LoadMaster Connection Timeout must be set to one day. The reason why this value can be set so high is because the LoadMaster monitors client connection to Real Servers and if a server fails then the LoadMaster can drop the associated client connections to that Real Server. Clients are disconnected from the LoadMaster and then reconnected to the LoadMaster to connect to another Real Server.

One day is the maximum value for this setting and it must be used in conjunction with the Drop Connections on RS failure option.

  1. To configure the Connection Timeout, click System Configuration.
  1. Click Miscellaneous Options.
  2. Click L7 Configuration.

Figure 3‑3: Set L7 Connection Drain Time

  1. Enter 86400 (1 day) in the L7 Connection Drain Time (secs) field and click Set Time.

3.4Connection Scaling For Large Scale Deployments

Execution of this procedure is optional and should be used only in cases where network traffic is expected to be greater than 64,000 server connections at any one particular time.

L7 Transparency must be disabled in order to use connection scaling.

  1. To use connection scaling, click System Configuration.
  2. Click Miscellaneous Options.
  3. Click L7 Configuration.

Figure 3‑4: Allow connection scaling

  1. Select the Allow connection scaling over 64K Connections checkbox.
  2. Click Virtual Services.
  3. Click View/Modify Services.
  4. Click the Modify button of the appropriate Virtual IP Address.
  5. Expand the Advanced Properties section.

Figure 3‑5: Advanced Properties section

  1. In the Advanced Properties panel, input a list of Alternate Source Addresses. Multiple IPV4 addresses must be separated with a space; each must be unallocated and allow 64K connections.
  2. Click the Set Alternate Source Addresses button.

3.5Enable Subnet Originating Requests Globally

It is best practice to enable the Subnet Originating Requests option globally.

In a one-armed setup (where the Virtual Service and Real Servers are on the same network/subnet) Subnet Originating Requests is usually not needed. However, enabling Subnet Originating Requests should not affect the routing in a one-armed setup.

In a two-armed setup where the Virtual Service is on network/subnet A, for example, and the Real Servers are on network B - Subnet Originating Requests should be enabled on LoadMasters with firmware version 7.1-16 and above.

When Subnet Originating Requests is enabled, the LoadMaster will route traffic so that the Real Server will see traffic arriving from the LoadMaster interface that is in that network/subnet.

When Subnet Originating Requests is enabled globally, it is automatically enabled on all Virtual Services. If the Subnet Originating Requests option is disabled globally, you can choose whether or not to enable Subnet Originating Requests on a per-Virtual Service basis.

To enable Subnet Originating Requests globally, follow the steps below:

  1. In the main menu of the LoadMaster WUI, go to System Configuration > Miscellaneous Options > Network Options.

Figure 3‑6: Subnet Originating Requests

  1. Tick the Subnet Originating Requests check box.

4Skype for Business Templates

KEMP have developed templates containing our recommended settings for Skype for Business. These templates can be installed on the LoadMaster and used when creating each of the Virtual Services. Using a template automatically populates the settings in the Virtual Services. This is quicker and easier than manually configuring each Virtual Service. If needed, changes can be made to any of the Virtual Service settings after using the template.

Released templates can be downloaded from the Templates section on the KEMP documentation page: http://kemptechnologies.com/documentation/.

For more information and steps on how to import and use templates, refer to the Virtual Services and Templates, Feature Description.

For steps on how to create the Virtual Services using the templates, refer to Section 6.

For steps on how to manually add and configure each of the Virtual Services (without using the templates), refer to Section 5.

5Configuring Skype for Business 2015 VSs without Templates

This deployment guide covers three types of Virtual Service (VS); DNS Only, HLB only and those that are common to both types of environment. The below sections provide instructions and recommended configuration options for setting up a KEMP LoadMaster to work with Skype for Business 2015 without the use of Virtual Service Templates.

For an explanation of each of the fields mentioned, refer to the

Web User Interface (WUI), Configuration Guide.

5.1DNS Only Configuration without Templates

Refer to the sections below for instructions on how to set up the LoadMaster using a DNS only configuration.

Microsoft recommends that DNS load balancing is used for Session Initiation Protocol (SIP) traffic. Microsoft also recommend that web services are configured to override FQDN for internal web services.

Source-IP Persistence

Source IP persistence can be used but take care before enabling it because:

  • Clients from behind a NAT device show up as a single IP
  • It can result in uneven connection distribution

Cookies

If cookies are used, there is no negative impact. However, there are some requirements:

  • The cookie must be named MS-WSMAN
  • It must not expire
  • It must not be marked httpOnly
  • Cookie optimization should be turned off

To configure the various Virtual Services, refer to the sections below.

5.1.1Director Internal WebSvc HTTPS Virtual Service

To configure a Virtual Service for Skype for Business Director, follow the steps below:

  1. Click the Add New button.

Figure 5‑1: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 443 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Director Internal WebSvc HTTPS.
  4. Ensure that TCP is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑2 Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 checkbox (if visible) is clear.

b)Ensure the Transparency checkbox is clear.

c)Enter 444 in the Extra Ports field and click the Set Extra Ports button.

d)Select Source IP Address as the Persistence Mode.

e)Select 20 Minutes as the Persistence Timeout.

f)Select least connection as the Scheduling Method.

g)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

Figure 5‑3: Real Servers section

  1. Expand the Real Servers section.
  2. Select TCP Connection Only from the drop-down list.
  3. Enter 5061 in the Checked Port field and click Set Check Port.

5.1.2Director Internal WebSvc HTTP Virtual Service

To configure a Virtual Service for Skype for Business Director, follow the steps below:

  1. Click the Add New button.

Figure 5‑4: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 80 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Director Internal WebSvc HTTP.
  4. Ensure that TCP is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑5: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 checkbox is clear.

b)Ensure the Transparency checkbox is clear.

c)Select Source IP Address as the Persistence Mode.

d)Select 20 Minutes as the Persistence Timeout.

e)Select least connection as the Scheduling Method.

f)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

  1. Expand the Real Servers section.

Figure 5‑6: Real Servers section

  1. Select TCP Connection Only from the drop-down list.
  2. Enter 5061 in the Checked Port field and click Set Check Port.

5.1.3Front End Internal WebSvc HTTPS Virtual Service

To configure a HTTPS Virtual Service for Skype for Business Front End Internal WebSvc, follow the steps below:

  1. Click the Add New button.

Figure 5‑7: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 443 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 FE Internal WebSvc HTTPS.
  4. Ensure that TCP is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑8: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 checkbox is clear.

b)Ensure the Transparency checkbox is clear.

c)Enter 444 in the Extra Ports field and click the Set Extra Ports button.

d)Select Source IP Address as the Persistence Mode.

e)Select 20 Minutes as the Persistence Timeout.

f)Select least connection as the Scheduling Method.

g)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

Figure 5‑9: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

5.1.4Front End Internal WebSvc HTTP Virtual Service

To configure a Virtual Service for Skype for Business Front End Internal WebSvc HTTP, follow the steps below:

  1. Click the Add New button.

Figure 5‑1: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 80 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 FE Internal WebSvc HTTP.
  4. Ensure that tcp is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑2: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 checkbox is clear.

b)Ensure the Transparency checkbox is clear.

c)Select Source IP Address as the Persistence Mode.

d)Select 20 Minutes as the Persistence Timeout.

e)Select least connection as the Scheduling Method.

f)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

Figure 5‑3: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

5.2HLB Only Configuration without Templates

The HLB only configuration instructions are below.

5.2.1Director Internal WebSvc HTTPS Virtual Service

To configure a Virtual Service for Skype for Business Director, follow the steps below:

  1. Click the Add New button.

Figure 5‑13: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 443 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Director Internal WebSvc HTTPS.
  4. Ensure that TCP is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑14: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 checkbox is clear.

b)Ensure the Transparency checkbox is clear.

c)Enter 444 in the Extra Ports field and click the Set Extra Ports button.

d)Select Source IP Address as the Persistence Mode.

e)Select 20 Minutes as the Persistence Timeout.

f)Select least connection as the Scheduling Method.

g)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

Figure 5‑15: Real Servers section

  1. Expand the Real Servers section.
  2. Select TCP Connection Only as the Real Server Check Parameters.
  3. Enter 5061 in the Checked Port field and click Set Check Port.

5.2.2Director Internal WebSvc HTTP Virtual Service

To configure a Virtual Service for Skype for Business Director, follow the steps below:

  1. Click the Add New button.

Figure 5‑16: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 80 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Director Internal WebSvc HTTP.
  4. Ensure that TCP is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑17: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 check box is clear.

b)Ensure the Transparency check box is clear.

c)Select Source IP Address as the Persistence Mode.

d)Select 20 Minutes as the Persistence Timeout.

e)Select least connection as the Scheduling Method.

f)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

Figure 5‑18: Real Servers section

  1. Expand the Real Servers section.
  2. Select TCP Connection Only as the Real Server Check Parameters.
  3. Enter 5061 in the Checked Port field and click Set Check Port.

5.2.3Front End Internal WebSvc HTTPS Virtual Service

To configure a Virtual Service for Skype for Business Front End Internal WebSvc HTTP, follow the steps below:

  1. Click the Add New button.

Figure 5‑49: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 443 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 FE Internal WebSvc HTTPS.
  4. Ensure that TCP is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑20: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 check box is clear.

b)Ensure the Transparency check box is clear.

c)Enter 444 in the Extra Ports field and click the Set Extra Ports button.

d)Select Source IP Address as the Persistence Mode.

e)Select 20 Minutes as the Persistence Timeout.

f)Select least connection as the Scheduling Method.

g)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

Figure 5‑21: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

5.2.4Front End Internal WebSvc HTTP Virtual Service

To configure a Virtual Service for Skype for Business Front End Internal WebSvc HTTP, follow the steps below:

  1. Click the Add New button.

Figure 5-22: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 80 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 FE Internal WebSvc HTTP.
  4. Ensure that tcp is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑23: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 checkbox is clear.

b)Ensure the Transparency checkbox is clear.

c)Select Source IP Address as the Persistence Mode.

d)Select 20 Minutes as the Persistence Timeout.

e)Select least connection as the Scheduling Method.

f)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

Figure 5-24: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

5.2.5Internal Front-End SIP Virtual Service

To configure a Virtual Service for Skype for Business Internal Front-End SIP, follow the steps below:

  1. Click the Add New button.

Figure 5‑25: Virtual Service Parameters

  1. Enter a Virtual Address.
  2. Enter 5061 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Internal Front-End SIP.
  4. Ensure that tcp is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑26: Basic Properties section

  1. Within the Basic Properties section, select Generic as the Service Type.

Figure 5‑27: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Enter 448,5070-5073,5075,5076,5080 in the Extra Ports field and click the Set Extra Ports button.

b)Select Normal Protocols in the Server Initiating Protocols drop-down menu.

c)Select Source IP Address as the Persistence Mode.

d)Select 20 Minutes as the Persistence Timeout.

e)Select least connection as the Scheduling Method.

f)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

Figure 5-28: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

5.2.6Internal Front-End DCOM Virtual Service

To configure a Virtual Service for Skype for Business Internal WebSvc HTTP, follow the steps below:

  1. Click the Add New button.

Figure 5‑29: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 135 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Internal Front-End DCOM.
  4. Ensure that tcp is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑30: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Deselect the Transparency checkbox.

b)Select Normal Protocols in the Server Initiating Protocols drop-down menu.

c)Select Source IP Address as the Persistence Mode.

d)Select 20 Minutes as the Persistence Timeout.

e)Select least connection as the Scheduling Method.

f)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

Figure 5‑31: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

5.2.7Director SIP Virtual Service

To configure a Virtual Service for Skype for Business Internal Director SIP, follow the steps below:

  1. Click the Add New button.

Figure 5‑32: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 5061 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Internal Director SIP.
  4. Ensure that tcp is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑33: Basic Properties section

  1. Within the Basic Properties section, select Generic as the Service Type.

Figure 5‑34: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 checkbox is clear.

b)Ensure the Transparency checkbox is clear.

c)Select Normal Protocols in the Server Initiating Protocols drop-down menu.

d)Select Source IP Address as the Persistence Mode.

e)Select 20 Minutes as the Persistence Timeout.

f)Select least connection as the Scheduling Method.

g)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

h)Select the Use Address for Server NAT checkbox.

Figure 5‑35: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

5.2.8Mediation Virtual Service

DNS-only load balancing is sufficient for Mediation pools. If using the LoadMaster instead of DNS, load balance only TCP port 5070.

To configure a Virtual Service for Skype for Business Mediation, follow the steps below:

  1. Click the Add New button.

Figure 5‑36: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 5070 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Mediation.
  4. Ensure that TCP is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑37: Basic Properties section

  1. Within the Basic Properties section, select Generic as the Service Type.

Figure 5‑38: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 checkbox is clear.

b)Ensure the Transparency checkbox is clear.

c)Select Normal Protocols in the Server Initiating Protocols drop-down menu.

d)Select Source IP Address as the Persistence Mode.

e)Select 20 Minutes as the Persistence Timeout.

f)Select least connection as the Scheduling Method.

g)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

Figure 5‑39: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the drop-down menu.

b)Enter 5070 in the Checked Port field and click Set Check Port.

5.2.9Edge Internal AV Media TCP Virtual Service

This is the failback path for A/V media transfer. It is used for file transfer and desktop sharing.

To configure a Virtual Service for Skype for Business Edge Internal AV Media TCP, follow the steps below:

  1. Click the Add New button.

Figure 5‑40: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 443 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Edge Internal AV Media TCP.
  4. Ensure that TCP is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑41: Basic Properties section

  1. Within the Basic Properties section, select Generic as the Service Type.

Figure 5‑42: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 check box is clear.

b)Ensure the Transparency check box is clear.

c)Select Normal Protocols in the Server Initiating Protocols drop-down menu.

d)Select Source IP Address as the Persistence Mode.

e)Select 20 Minutes as the Persistence Timeout.

f)Select least connection as the Scheduling Method.

g)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

Figure 5-43: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

5.2.10Edge Internal AV Media UDP Virtual Service

This is the preferred path for A/V media transfer.

To configure a Virtual Service for Skype for Business Edge Internal AV Media UDP, follow the steps below:

  1. Click the Add New button.

Figure 5‑44: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 3478 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Edge Internal AV Media UDP.
  4. Select udp as the Protocol.
  5. Click Add This Virtual Service.
  6. Expand the Standard Options section.

Figure 5‑5: Standard Options

  1. Select Source IP Address as the Persistence Mode.
  2. Select 20 Minutes as the Persistence Timeout.
  3. Select least connection as the Scheduling Method.

Figure 5‑45: Real Servers section

  1. Expand the Real Servers section.
  2. Select ICMP Ping in the Real Server Check Parameters drop-down menu.

5.2.11Edge Internal SIP Virtual Service

This is used by Directors and FE Pools.

To configure a Virtual Service for Skype for Business Edge Internal SIP, follow the steps below:

  1. Click the Add New button.

Figure 5‑46: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 5061 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Edge Internal SIP.
  4. Ensure that tcp is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑47: Basic Properties section

  1. Within the Basic Properties section, select Generic as the Service Type.

Figure 5‑48: Standard Options section

  1. Expand the Standard Options section and select the following options:

c)Enter 5062 in the Extra Ports field and click Set Extra Ports.

Port 5062 is used by any FE pool and SBA

d)Ensure the Transparency checkbox is clear.

e)Select Normal Protocols in the Server Initiating Protocols drop-down menu.

f)Select Source IP Address as the Persistence Mode.

g)Select 20 Minutes as the Persistence Timeout.

h)Select least connection as the Scheduling Method.

i)Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout.

j)Select the Use Address for Server NAT checkbox.

Figure 5‑49: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the Real Server Check Parameters drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

5.3Configure External Edge Virtual Services without Templates

To configure the various Edge Virtual Services, refer to the sections below.

Load Balancing External Interfaces of Edge Pools using LoadMaster

When load balancing external interfaces of Edge pools, the shared interface IP should be used as the default gateway on all Edge interfaces. Also, a publicly routable IP with no NAT or port translation must be used.

5.3.1Edge External SIP Virtual Service

To configure a Virtual Service for Skype for Business Edge External SIP, follow the steps below:

  1. Click the Add New button.

Figure 5‑50: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 443 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Edge External SIP.
  4. Ensure that tcp is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5-51: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 checkbox is clear.

b)Ensure the Transparency checkbox is clear.

c)Select Source IP Address as the Persistence Mode.

d)Select 20 Minutes as the Persistence Timeout.

e)Select least connection as the Scheduling Method.

f)Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout.

Figure 5‑52: Advanced Properties section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the Real Server Check Parameters drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

5.3.2Edge External SIP Federation Virtual Service

To configure a Virtual Service for Skype for Business Edge External SIP Federation, follow the steps below:

  1. Click the Add New button.

Figure 5‑53: Virtual Service Parameters

  1. Enter a Virtual Address.
  2. Enter 5061 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Edge External SIP Federation.
  4. Ensure that tcp is set as the Protocol.
  5. Click Add This Virtual Service.

 

Figure 5‑54: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 checkbox is clear.

b)Ensure the Transparency checkbox is clear.

c)Select Source IP Address as the Persistence Mode.

d)Select 20 Minutes as the Persistence Timeout.

e)Select least connection as the Scheduling Method.

f)Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout.

Figure 5‑55: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the Real Server Check Parameters drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

5.3.3Edge External XMPP Virtual Service

To configure a Virtual Service for Skype for Business Edge External XMPP, follow the steps below:

  1. Click the Add New button.

Figure 5‑56: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 5269 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Edge External XMPP.
  4. Ensure that tcp is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑57: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 checkbox is clear.

b)Ensure the Transparency checkbox is clear.

c)Select Source IP Address as the Persistence Mode.

d)Select 20 Minutes as the Persistence Timeout.

e)Select least connection as the Scheduling Method.

f)Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout.

Figure 5‑58: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the Real Server Check Parameters drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

5.3.4Edge External Conferencing Virtual Service

To configure a Virtual Service for Skype for Business Edge External Conferencing, follow the steps below:

  1. Click the Add New button.

Figure 5‑59: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 443 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Edge External Conferencing.
  4. Ensure that tcp is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑60: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 checkbox is clear.

b)Ensure the Transparency checkbox is clear.

c)Select Source IP Address as the Persistence Mode.

d)Select 20 Minutes as the Persistence Timeout.

e)Select least connection as the Scheduling Method.

f)Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout.

Figure 5‑65‑7: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the Real Server Check Parameters drop-down menu.

b)Enter 443 in the Checked Port field and click Set Check Port.

5.3.5Edge External AV Media TCP Virtual Service

To configure a Virtual Service for Skype for Business Edge External AV, follow the steps below:

  1. Click the Add New button.

Figure 5‑62: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 443 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Edge External AV Media TCP.
  4. Ensure that tcp is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑63: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 check box is clear.

b)Select Transparency check box.

c)Select Source IP Address as the Persistence Mode.

d)Select 20 Minutes as the Persistence Timeout.

e)Select least connection as the Scheduling Method.

f)Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout.

Figure 5‑64: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the Real Server Check Parameters drop-down menu.

b)Enter 443 in the Checked Port field and click Set Check Port.

5.3.6Edge External AV Media UDP Virtual Service

To configure a Virtual Service for Skype for Business Edge External AV Media UDP, follow the steps below:

  1. Click the Add New button.

Figure 5‑65: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 3478 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Edge External AV Media UDP.
  4. Select udp as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑66: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Select Source IP Address as the Persistence Mode.

b)Set the Timeout to 20 Minutes.

c)Select least connection as the Scheduling Method.

Figure 5-67: Real Servers section

  1. Expand the Real Servers section.
  2. Select ICMP Ping in the Real Server Check Parameters drop-down menu.

Ensure the Forwarding Method is set to Direct Return when adding Real Servers.

5.4Common to Both without Templates

The Virtual Services listed below are common to both DNS and HLB configurations.

5.4.1Office Web App Servers Virtual Service

To configure a Virtual Service for Office Web App Servers, follow the steps below:

  1. Click the Add New button.

Figure 5‑68: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 443 in the Port field.
  3. Enter a recognisable Service Name, for example Office Web App Servers.
  4. Ensure that TCP is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑69: SSL Properties section

  1. Expand the SSL Properties section and select the following options:

a)Select the Enabled check box.

b)Select the Reencrypt check box.

Figure 5‑70:5‑8 Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Select Super HTTP and Source IP as the Persistence Mode.

b)Select 30 Minutes as the Persistence Timeout.

c)Select least connection as the Scheduling Method.

d)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

Figure 5‑72: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select HTTPS Protocol in the drop-down menu.

b)Enter /hosting/discovery in the URL field and click Set URL.

c)Select the Use HTTP/1.1 checkbox.

d)Select GET as the HTTP Method.

5.4.2Director Reverse Proxy HTTP Virtual Service

To configure a Virtual Service for Skype for Business Reverse Proxy HTTP, follow the steps below:

  1. Click the Add New button.

Figure 5‑73: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 80 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Director Reverse Proxy HTTP.
  4. Ensure that TCP is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5-74: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 checkbox is clear.

b)Ensure the Transparency checkbox is clear.

c)Select None as the Persistence Mode.

d)Select least connection as the Scheduling Method.

e)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

Figure 5‑75: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

  1. Click the Add New … button to add a Real Server.

Figure 5‑76: Add Real Server

  1. Enter the Real Server Address for Director(s).
  2. Enter 8080 as the port.

Ensure to not use 80 as the Real Server Port.

  1. Click the Add This Real Server button.

5.4.3Director Reverse Proxy HTTPS Virtual Service

To configure a Virtual Service for Skype for Business Reverse Proxy HTTPS, follow the steps below:

  1. Click the Add New button.

Figure 5‑77: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 443 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Director Reverse Proxy HTTPS.
  4. Ensure that TCP is set as the Protocol.
  5. Click Add This Virtual Service.
  6. Expand the SSL Properties section.

Figure 5‑78: SSL Properties section

  1. Select the Enabled check box.
  2. Select the Reencrypt checkbox.

Figure 5‑79: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Select None as the Persistence Mode.

b)Select least connection as the Scheduling Method.

c)Enter 1800 as the Idle Connection Timeout value and click Set Idle Timeout.

Figure 5‑80: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

  1. Click the Add New … button to add a Real Server.

Figure 5‑81: Add a Real Server

  1. Enter the Real Server Address for Director(s).
  2. Enter 4443 as the Port.

Ensure to not use 443 as the Real Server Port.

  1. Click the Add This Real Server button.

5.4.4Front End Reverse Proxy HTTP Virtual Service

To configure a Virtual Service for Skype for Business Reverse Proxy HTTP, follow the steps below:

  1. Click the Add New button.

Figure 5‑9: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 80 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Front End Reverse Proxy HTTP.
  4. Ensure that TCP is set as the Protocol.
  5. Click Add This Virtual Service.

Figure 5‑10: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Ensure the Force L4 checkbox is clear.

b)Ensure the Transparency checkbox is clear.

c)Select None as the Persistence Mode.

d)Select least connection as the Scheduling Method.

e)Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.

Figure 5‑11: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

  1. Click the Add New button to add a Real Server.

Figure 5‑12: Add Real Server

  1. Enter the Real Server Address for the Front End Server(s).
  2. Enter 8080 as the port.

Ensure to not use 80 as the Real Server Port.

  1. Click the Add This Real Server button.

5.4.5Front-End Reverse Proxy HTTPS Virtual Service

To configure a Virtual Service for Skype for Business Reverse Proxy HTTPS, follow the steps below:

  1. Click the Add New button.

Figure 5‑13: Add New VS screen

  1. Enter a Virtual Address.
  2. Enter 443 in the Port field.
  3. Enter a recognisable Service Name, for example SfB 2015 Front-End Reverse Proxy HTTPS.
  4. Ensure that TCP is set as the Protocol.
  5. Click Add This Virtual Service.
  6. Expand the SSL Properties section.

Figure 5‑14: SSL Properties section

  1. Select the Enabled check box.
  2. Select the Reencrypt checkbox.

Figure 5‑15: Standard Options section

  1. Expand the Standard Options section and select the following options:

a)Select None as the Persistence Mode.

b)Select least connection as the Scheduling Method.

c)Enter 1800 as the Idle Connection Timeout and click Set Idle Timeout.

Figure 5‑16: Real Servers section

  1. Expand the Real Servers section and select the following options:

a)Select TCP Connection Only in the drop-down menu.

b)Enter 5061 in the Checked Port field and click Set Check Port.

  1. Click the Add New button to add a Real Server.

Figure 5‑17: Add a Real Server

  1. Enter the Real Server Address for the Front End Server(s).
  2. Enter 4443 as the Port.

Ensure to not use 443 as the Real Server Port.

  1. Click the Add This Real Server button.

6Configuring Skype for Business 2015 VSs with Templates

This deployment guide covers three types of Virtual Service; DNS Only, HLB only and those that are common to both types of environment. The below sections provide instructions and recommended configuration options for setting up a KEMP LoadMaster to work with Skype for Business 2015 with the use of Virtual Service templates.

For an explanation of each of the fields mentioned, refer to the

Web User Interface (WUI), Configuration Guide.

6.1DNS Configuration with Templates

Refer to the sections below for instructions on how to set up the LoadMaster using a DNS only configuration using the KEMP templates.

Microsoft recommends that DNS load balancing is used for Session Initiation Protocol (SIP) traffic. Microsoft also recommends that web services are configured to override FQDN for internal web services.

Source IP Persistence

Source IP persistence can be used but take care before enabling it because:

  • Clients from behind a NAT device show up as a single IP
  • It can result in uneven connection distribution

Cookies

If cookies are used, there is no negative impact. However, there are some requirements:

  • The cookie must be named MS-WSMAN
  • It must not expire
  • It must not be marked httpOnly
  • Cookie optimization should be turned off

To configure the various Virtual Services, refer to the sections below.

6.1.1Director DNS

The Skype Director DNS template contains two Virtual Services.

  • Skype Director DNS - WebSvc HTTP
  • Skype Director DNS - WebSvc HTTPS
6.1.1.1Deploy the Director DNS template

To add the Virtual Services for Skype Director DNS with the template, follow the steps below:

  1. Click the Add New button.

Figure 6-1: Add New VS screen

  1. Enter a Virtual Address.
  2. Select the Skype Director DNS template from the Use Template drop-down list.
  3. Click Add This Virtual Service.
6.1.1.2Configure Director WebSvc HTTP Virtual Service

To configure the SfB Director WebSvc HTTP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑2: View/Modify screen

  1. Click Modify on the Skype Director DNS - WebSvc HTTP Virtual Service.
  2. Expand the Real Servers section.
  3. Click Add New.

Figure 6‑1: Add Real Server screen

  1. Enter the Real Server IP Address.
  2. Confirm that Port80 is entered.
  3. Click Add This Real Server.
6.1.1.3Configure Director WebSvc HTTPS Virtual Service

To configure the Skype Director DNS - WebSvc HTTPS Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑4: View/Modify screen

  1. Click Modify on the Skype Director DNS - WebSvc HTTPS Virtual Service.
  1. Expand the Real Servers section.
  2. Click Add New.

Figure 6‑5: Add Real Server screen

  1. Enter the Real Server IP Address.
  2. Confirm that Port 443 is entered.
  3. Click Add This Real Server.

6.1.2Front End DNS

The Skype Front End DNS template contains two Virtual Services.

  • Skype Front End DNS - WebSVC HTTP
  • Skype Front End DNS - WebSVC HTTPS
6.1.2.1Deploy Front End DNS template

To add the Virtual Services for Skype for Business Front End with the template, follow the steps below:

  1. Click the Add New button.

Figure 6-6: Add New VS screen

  1. Enter a Virtual Address.
  2. Select the Skype Front End DNS template under Use Template.
  3. Click Add This Virtual Service.
6.1.2.2Configure Front End WebSvc HTTP Virtual Service

To configure the Skype Front End DNS - WebSVC HTTP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑7: View/Modify screen

  1. Click Modify on the Skype Front End DNS - WebSVC HTTP Virtual Service.
  2. Expand the Real Servers section.
  3. Click Add New.

Figure 6‑2: Real Server parameters

  1. Enter the Real Server IP Address.
  2. Confirm that Port80 is entered.
  3. Click Add This Real Server.
6.1.2.3Configure Front End WebSvc HTTPS Virtual Service

To configure the Skype Front End DNS - WebSVC HTTPS Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑9: View/Modify screen

  1. Click Modify on the Skype Front End DNS - WebSVC HTTPS Virtual Service.
  1. Expand the Real Servers section.
  2. Click Add New

Figure 6‑5: Add Real Server screen

  1. Enter the Real Server IP Address.
  2. Confirm that Port443 is entered.
  3. Click Add This Real Server.

6.2HLB Only Configuration with Templates

The HLB only configuration instructions using the KEMP Templates are below.

6.2.1Director HLB Only

The Skype Director HLB Only template contains three Virtual Services:

  • Skype Director HLB Only - WebSvc HTTP
  • Skype Director HLB Only - WebSvc HTTPS
  • Skype Director HLB Only - SIP
6.2.1.1Deploy Director HLB Only template

To add the Virtual Services for Skype Director with the template, follow the steps below:

  1. Click the Add New button.

Figure 6-11: Add New VS screen

  1. Enter a Virtual Address.
  2. Select the Skype Director HLB Only template in the Use Template drop-down list.
  3. Click Add This Virtual Service.
6.2.1.2Configure Director WebSvc HTTP Virtual Service

To configure the Skype Director HLB Only - WebSvc HTTP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑12: View/Modify screen

  1. Click Modify on the Skype Director HLB Only - WebSvc HTTP Virtual Service.
  2. Expand the Real Servers section.
  1. Click Add New

Figure 6‑3: Real Server parameters

  1. Enter the Real Server IP Address.
  2. Confirm that Port80 is entered.
  3. Click Add This Real Server.
6.2.1.3Configure Director WebSvc HTTPS Virtual Service

To configure the Skype Director HLB Only - WebSvc HTTPS Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑14: View/Modify screen

  1. Click Modify on the Skype Director HLB Only - WebSvc HTTPS Virtual Service.
  1. Expand the Real Servers section.
  2. Click Add New.

Figure 6‑15: Add Real Server screen

  1. Enter the Real Server IP Address.
  2. Confirm that Port 443 is entered.
  3. Click Add This Real Server.
6.2.1.4Configure Director SIP Virtual Service

To configure the Skype Director HLB Only - SIP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑16: View/Modify screen

  1. Click Modify on the Skype Director HLB Only - SIP Virtual Service.
  2. Expand Real Servers section.
  3. Click Add New.

Figure 6‑17: Add Real Server screen

  1. Enter the Real Server IP Address.
  2. Confirm that Port5061 is entered.
  3. Click Add This Real Server.

6.2.2Front End HLB Only

The Skype Front End HLB Only template contains four Virtual Services:

  • Skype Front End HLB Only - WebSvc HTTP
  • Skype Front End HLB Only - WebSvc HTTPS
  • Skype Front End HLB Only - SIP
  • Skype Front End HLB Only - DCOM
6.2.2.1Deploy Front End HLB Only template

To add the Virtual Services for Skype Front End with the template, follow the steps below:

  1. Click the Add New button.

Figure 6-18: Add New VS screen

  1. Enter a Virtual Address.
  2. Select Skype Front End HLB Only in the Use Template drop-down list.
  3. Click Add This Virtual Service.
6.2.2.2Configure Front End WebSvc HTTP Virtual Service

To configure the Skype Director HLB Only - WebSvc HTTP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑19: View/Modify screen

  1. Click Modify on the Skype Director HLB Only - WebSvc HTTP Virtual Service.
  1. Expand the Real Servers section.
  2. Click Add New.

Figure 6‑20: Add Real Server screen

  1. Enter the Real Server IP Address.
  2. Confirm that Port80 is entered.
  3. Click Add This Real Server.
6.2.2.3Configure the Front End WebSvc HTTPS Virtual Service

To configure the Skype Front End HLB Only - WebSvc HTTPS Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑21: View/Modify screen

  1. Click Modify on the Skype Front End HLB Only - WebSvc HTTPS Virtual Service.

Figure 6‑22: Add Real Server screen

  1. Expand the Real Servers section.
  2. Click Add New.
  3. Enter the Real Server IP Address.
  4. Confirm that Port443 is entered.
  5. Click Add This Real Server.
6.2.2.4Configure the Front End DCOM Virtual Service

To configure the Skype Front End HLB Only - DCOM Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑23: View/Modify screen

  1. Click Modify on the Skype Front End HLB Only - DCOM Virtual Service.
  1. Expand the Real Servers section.
  2. Click Add New.

Figure 6‑24: Add Real Server screen

  1. Enter the Real Server IP Address.
  2. Confirm that Port135 is entered.
  3. Click Add This Real Server.
6.2.2.5Configure the Front End SIP Virtual Service

To configure the Skype Front End HLB Only - SIP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑25: View/Modify screen

  1. Click Modify on the Skype Front End HLB Only - SIP Virtual Service.

Figure 6‑26: Add Real Server screen

  1. Expand the Real Servers section.
  2. Click Add New.
  3. Enter the Real Server IP Address.
  4. Confirm that Port5061 is entered.
  5. Click Add This Real Server.

6.2.3Mediation Virtual Service

DNS-only load balancing is sufficient for Mediation pools. If using the LoadMaster instead of DNS, load balance only TCP port 5070.

To configure a Virtual Service for Skype Mediation with the template, follow the steps below:

  1. Click the Add New button.

Figure 6-27: Add New VS screen

  1. Enter a Virtual Address.
  2. Select Skype Mediation HLB Only in the Use Template drop-down list.
  3. Click Add This Virtual Service.

Figure 6-28: Add Real Server screen

  1. Expand the Real Servers section.
  2. Click Add New.
  3. Enter the Real Server IP Address.
  4. Confirm that Port5070 is entered.
  5. Click Add This Real Server.

6.2.4Internal Edge HLB Only

The Skype Edge Internal HLB Only template contains three Virtual Services:

  • Skype Edge Internal HLB Only - AV Media TCP
  • Skype Edge Internal HLB Only - AV Media UDP
  • Skype Edge Internal HLB Only - SIP
6.2.4.1Deploy Internal Edge HLB template

To add the Virtual Services for Skype for Business Director with Template, follow the steps below:

  1. Click the Add New button.

Figure 6-29: Add New VS screen

  1. Enter a Virtual Address.
  2. Select the Skype Edge Internal HLB Only template in the Use Template drop-down list.
  3. Click Add This Virtual Service.
6.2.4.2Configure Internal Edge AV Media TCP Virtual Service

To configure the Skype Edge Internal HLB Only - AV Media TCP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left.e -hand navigation.

Figure 6‑30: View/Modify screen

  1. Click Modify on the Skype Edge Internal HLB Only - AV Media TCP Virtual Service.

Figure 6‑31: Add Real Server screen

  1. Expand the Real Servers section.
  2. Click Add New.
  3. Enter the Real Server IP Address.
  4. Confirm that Port443 is entered.
  5. Click Add This Real Server.
6.2.4.3Configure the Internal Edge AV Media UDP Virtual Service

To configure the Skype Edge Internal HLB Only - AV Media UDP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑32: View/Modify screen

  1. Click Modify on the Skype Edge Internal HLB Only - AV Media UDP Virtual Service.

Figure 6‑33: Add Real Server screen

  1. Expand Real Servers section.
  2. Click Add New.
  3. Enter the Real Server IP Address.
  4. Confirm that Port3478 is entered.
  5. Click Add This Real Server.
6.2.4.4Configure Internal Edge SIP Virtual Service

To configure the Skype Edge Internal HLB Only - SIP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑34: View/Modify screen

  1. Click Modify on the Skype Edge Internal HLB Only - SIP Virtual Service.
  2. Expand the Real Servers section.
  1. Click Add New

Figure 6‑35: Add Real Server screen

  1. Enter the Real Server IP Address.
  2. Confirm that Port5061 is entered.
  3. Click Add This Real Server.

6.3Configure External Edge Virtual Services with Templates

To configure the various Edge Virtual Services with Templates, refer to the sections below.

When load balancing external interfaces of Edge pools, the shared interface IP should be used as the default gateway on all Edge interfaces. Also, a publicly routable IP with no NAT or port translation must be used.

6.3.1Edge External HLB Only

The Skype Edge External HLB Only template contains three Virtual Services:

  • Skype Edge External HLB Only - SIP
  • Skype Edge External HLB Only - SIP Federation
  • Skype Edge External HLB Only - XMPP
6.3.1.1Deploy the External Edge HLB Template

To add the Virtual Services for Skype Edge External HLB Only with the template, follow the steps below:

  1. Click the Add New button.

Figure 6-36: Add New VS screen

  1. Enter a Virtual Address.
  2. Select the Skype Edge External HLB Only template in the Use Template drop-down list.
  3. Click Add This Virtual Service.
6.3.1.2Configure the External SIP Virtual Service

To configure the SfB Edge External SIP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑37: View/Modify screen

  1. Click Modify on the SfB Edge External SIP Virtual Service.

Figure 6‑38: Add Real Server screen

  1. Expand the Real Servers section.
  2. Click Add New.
  3. Enter the Real Server IP Address.
  4. Confirm that Port443 is entered.
  5. Click Add This Real Server.
6.3.1.3Configure the External SIP Federation Virtual Service

To configure the Skype Edge External HLB Only - SIP Federation Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑39: View/Modify screen

  1. Click Modify on the Skype Edge External HLB Only - SIP Federation Virtual Service.

Figure 6‑40: Add Real Server screen

  1. Expand the Real Servers section.
  2. Click Add New.
  3. Enter the Real Server IP Address.
  4. Confirm that Port5061 is entered.
  5. Click Add This Real Server.
6.3.1.4Configure the External XMPP Virtual Service

To configure the Skype Edge External HLB Only - XMPP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left hand navigation.

Figure 6‑41: View/Modify screen

  1. Click Modify on the Skype Edge External HLB Only - XMPP Virtual Service.

Figure 6‑42: Add Real Server screen

  1. Expand Real Servers section.
  2. Click Add New.
  3. Enter the Real Server IP Address.
  4. Confirm that Port5269 is entered.
  5. Click Add This Real Server.

6.3.2Edge External Conferencing

To configure a Virtual Service for Skype Edge External Conferencing with the template, follow the steps below:

  1. Click the Add New button.

Figure 6-43: Add New VS screen

  1. Enter a Virtual Address.
  2. Select the Skype Edge External Conferencing template in the Use Template drop-down list.
  3. Click Add This Virtual Service.
  4. Expand the Real Servers section.
  5. Click Add New.

Figure 6-44: Add Real Server screen

  1. Enter the Real Server IP Address.
  2. Confirm that Port443 is entered.
  3. Click Add This Real Server.

6.3.3Edge External AV HLB Only

The Skype Edge External AV HLB Only template contains two Virtual Services:

  • Skype Edge External AV HLB Only - Media TCP
  • Skype Edge External AV HLB Only - Media UDP
6.3.3.1Deploy the Edge External AV HLB Template

To add the Virtual Services for Skype Edge External AV with the template, follow the steps below:

  1. Click the Add New button.

Figure 6-45: Add New VS screen

  1. Enter a Virtual Address.
  2. Select the Skype Edge External AV HLB Only template in the Use Template drop-down list.
  3. Click Add This Virtual Service.
6.3.3.2Configure the Edge External AV Media TCP Virtual Service

To configure the Skype Edge External AV HLB Only - Media TCP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left hand navigation.

Figure 6‑46: View/Modify screen

  1. Click Modify on the Skype Edge External AV HLB Only - Media TCP Virtual Service.

Figure 6‑47: Add Real Server screen

  1. Expand the Real Servers section.
  2. Click Add New
  3. Enter the Real Server IP Address.
  4. Confirm that Port443 is entered.
  5. Click Add This Real Server.
6.3.3.3Configure the Edge External AV Media UDP Virtual Service

To configure the Skype Edge Internal HLB Only - AV Media UDP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑48: View/Modify screen

  1. Click Modify on the Skype Edge Internal HLB Only - AV Media UDP Virtual Service.
  1. Expand the Real Servers section.
  2. Click Add New.

Figure 6‑49: Add Real Server screen

  1. Enter the Real Server IP Address.
  2. Confirm that Port3478 is entered.
  3. Set the Forwarding Method to Direct Return.
  4. Click Add This Real Server.

Ensure the Forwarding Method is set to Direct Return when adding the Real Servers.

6.4Common to Both with Templates

The Virtual Services listed below are common to both DNS and HLB configurations.

6.4.1Office Web App Servers Virtual Service

To configure a Virtual Service for Office Web App Servers with the template, follow the steps below:

  1. Click the Add New button.

Figure 6-50: Add New VS screen

  1. Enter a Virtual Address.
  2. Select Skype Office Web App Servers in.e the UseTemplate drop-down list.
  3. Click Add This Virtual Service.

Figure 6‑51: SSL Properties section

  1. Select a valid certificate which was previously imported and click the > button to assign the certificate.
  2. Click Set Certificates.
  3. Expand the Real Servers section.
  4. Click Add New.

Figure 6-52: Add Real Server screen

  1. Enter the Real Server IP Address.
  2. Confirm that Port443 is entered.
  3. Click Add This Real Server.

6.4.2Director Reverse Proxy

The Skype Director Reverse Proxy template contains two Virtual Services:

  • Skype Director Reverse Proxy - HTTP
  • Skype Director Reverse Proxy - HTTPS
6.4.2.1Deploy the Director Reverse Proxy Template

To add the Virtual Services for Skype for Business Director with the template, follow the steps below:

  1. Click the Add New button.

Figure 6-53: Add New VS screen

  1. Enter a Virtual Address.
  2. Select the Skype Director Reverse Proxy template in the Use Template drop-down list.
  3. Click Add This Virtual Service.
6.4.2.2Configure Director Reverse Proxy HTTP Virtual Service

To configure the Skype Director Reverse Proxy - HTTP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑54: View/Modify screen

  1. Click Modify on the Skype Director Reverse Proxy - HTTP Virtual Service.

Figure 6‑55: Add Real Server screen

  1. Expand the Real Servers section.
  2. Click Add New.
  3. Enter the Real Server IP Address.
  4. Confirm that Port8080 is entered.
  5. Click Add This Real Server.

Ensure to not use 80 as the Real Server Port.

6.4.2.3Configure the Director Reverse Proxy HTTPS Virtual Service

To configure the Skype Director Reverse Proxy - HTTPS Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑56: View/Modify screen

  1. Click Modify on the Skype Director Reverse Proxy - HTTPS Virtual Service.
  1. Expand the SSL Properties section.

Figure 6‑57: SSL Properties section

  1. Select a valid certificate which was previously imported and click the > button to assign the certificate.
  2. Click Set Certificates.
  1. Expand the Real Servers section.
  2. Click Add New.

Figure 6-58: Add Real Server screen

  1. Enter the Real Server IP Address.
  2. Confirm that Port4443 is entered.
  3. Click Add This Real Server.

Ensure to not use 443 as the Real Server Port.

6.4.3Front End Reverse Proxy

The Skype for Business 2015 Front End Reverse Proxy template contains two Virtual Services:

  • Skype Front End Reverse Proxy - HTTP
  • Skype Front End Reverse Proxy - HTTPS
6.4.3.1Deploy the Front End Reverse Proxy Template

To add the Virtual Services for Skype Front End Reverse Proxy with the template, follow the steps below:

  1. Click the Add New button.

Figure 6-59: Add New VS screen

  1. Enter a Virtual Address.
  2. Select the Skype For Business 2015 Front End Reverse Proxy template in the Use Template drop-down list.
  3. Click Add This Virtual Service.
6.4.3.2Configure the Front End Reverse Proxy HTTP Virtual Service

To configure the Skype Front End Reverse Proxy - HTTP Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑60: View/Modify screen

  1. Click Modify on the Skype Front End Reverse Proxy - HTTP Virtual Service.

Figure 6‑61: Add Real Server screen

  1. Expand the Real Servers section.
  2. Click Add New.
  3. Enter the Real Server IP Address.
  4. Confirm that Port8080 is entered.
  5. Click Add This Real Server.

Ensure to not use 80 as the Real Server Port.

6.4.3.3Configure the Front End Reverse Proxy HTTPS Virtual Service

To configure the Skype Front End Reverse Proxy - HTTPS Virtual Service, follow the steps below:

  1. Select View/Modify Services under Virtual Services in the left-hand navigation.

Figure 6‑62: View/Modify screen

  1. Click Modify on the Skype Front End Reverse Proxy - HTTPS Virtual Service.

Figure 6‑63: SSL Properties section

  1. Select a valid certificate which was previously imported and click the > button to assign the certificate.
  2. Click Set Certificates.
  3. Expand the Real Servers section.
  4. Click Add New.

Figure 6-64: Add Real Server screen

  1. Enter the Real Server IP Address.
  2. Confirm that Port4443 is entered.
  3. Click Add This Real Server.

Ensure to not use 443 as the Real Server Port.

7Additional Information

Some additional information that may be of use is contained within the sections below.

7.1Server Maintenance

When blocking traffic to a server during maintenance, removing the server IP entry from the pool Fully Qualified Domain Name (FQDN) is not sufficient. The server entry must be removed from the DNS. As the server to server traffic is topology-aware, in order to block server to server traffic the server must be removed from the DNS topology.

7.2Loss of Failover while using DNS

Loss of failover when load balancing Edge pools using DNS is possible in the following scenarios:

  • Federation with organizations running OCS versions older than Lync 2010
  • PIM connectivity with Skype, Windows Live, AOL, Yahoo! and XMPP partners
  • UM Play on Phone functionality
  • Transferring calls from UM Auto Attendant

7.3Hardware Load Balancing

If hardware load balancing is being used, a list of the ports that must be open can be found here: http://technet.microsoft.com/en-us/library/gg398833.aspx

Hardware load balancing Edge servers requires N+1 Public IP addresses.

Refer to the link below for further information on hardware load balancing:

References

The following sources are referred to in this document:

KEMP Technologies website

www.kemptechnologies.com

KEMP Technologies Documentation page

http://kemptechnologies.com/documentation

Web User Interface (WUI), Configuration Guide

http://kemptechnologies.com/documentation

Virtual Services and Templates, Feature Description

http://kemptechnologies.com/documentation

Ports and Protocols for Internal Servers

http://technet.microsoft.com/en-us/library/gg398833.aspx

Port Summary - Scaled Consolidated Edge with Hardware Load Balancers

http://technet.microsoft.com/en-us/library/gg398739.aspx

Scaled Consolidated Edge with Hardware Load Balancers

http://technet.microsoft.com/en-us/library/gg398478.aspx

 

 

 

 

Document History

Date

Change

Reason for Change

Version

Resp.

Aug 2015

Initial draft

First draft of document

1.0

LB

Sep 2015

Minor updates

Updated to reflect templates

2.0

LB

Oct 2015

Screenshot updates

LoadMaster WUI reskin

3.0

KG

Nov 2015

Minor updates

Small changes made

4.0

LB

Dec 2015

Release updates

Updates for 7.1-32

5.0

LB

Jan 2016

Minor updates

Updated

6.0

LB

Mar 2016

Minor updates

Enhancements made

7.0

LB

Oct 2016

Release updates

Updates for 7.2.36

8.0

POC

Jan 2017

Minor updates

Enhancements made

9.0

LB

Was this article helpful?

0 out of 0 found this helpful

Comments