MS Skype for Business

MS Skype for Business
Microsoft
Skype for Business
2015
Deployment Guide
VERSION: 9.0
UPDATED: JANUARY 2017
MS Skype for Business
Copyright Notices
Copyright © 2002-2017 KEMP Technologies, Inc.. All rights reserved.. KEMP Technologies and the KEMP
Technologies logo are registered trademarks of KEMP Technologies, Inc..
KEMP Technologies, Inc. reserves all ownership rights for the LoadMaster product line including software
and documentation. The use of the LoadMaster Exchange appliance is subject to the license agreement.
Information in this guide may be modified at any time without prior notice.
Microsoft Windows is a registered trademarks of Microsoft Corporation in the United States and other
countries. All other trademarks and service marks are the property of their respective owners.
Limitations: This document and all of its contents are provided as-is. KEMP Technologies has made efforts
to ensure that the information presented herein are correct, but makes no warranty, express or implied,
about the accuracy of this information. If any material errors or inaccuracies should occur in this document,
KEMP Technologies will, if feasible, furnish appropriate correctional notices which Users will accept as the
sole and exclusive remedy at law or in equity. Users of the information in this document acknowledge that
KEMP Technologies cannot be held liable for any loss, injury or damage of any kind, present or prospective,
including without limitation any direct, special, incidental or consequential damages (including without
limitation lost profits and loss of damage to goodwill) whether suffered by recipient or third party or from
any action or inaction whether or not negligent, in the compiling or in delivering or communicating or
publishing this document.
Any Internet Protocol (IP) addresses, phone numbers or other data that may resemble actual contact
information used in this document are not intended to be actual addresses, phone numbers or contact
information. Any examples, command display output, network topology diagrams, and other figures
included in this document are shown for illustrative purposes only. Any use of actual addressing or contact
information in illustrative content is unintentional and coincidental.
Portions of this software are; copyright (c) 2004-2006 Frank Denis. All rights reserved; copyright (c) 2002
Michael Shalayeff. All rights reserved; copyright (c) 2003 Ryan McBride. All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided
that the following conditions are met:
1.
Redistributions of source code must retain the above copyright notice, this list of conditions and the
following disclaimer
2.
Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the
following disclaimer in the documentation and/or other materials provided with the distribution.
THIS SOFTWARE IS PROVIDED BY THE ABOVE COPYRIGHT HOLDERS ''AS IS'' AND ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE ABOVE COPYRIGHT
HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.
The views and conclusions contained in the software and documentation are those of the authors and
should not be interpreted as representing official policies, either expressed or implied, of the above
copyright holders..
Portions of the LoadMaster software are copyright (C) 1989, 1991 Free Software Foundation, Inc. -51
Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA- and KEMP Technologies Inc. is in full compliance
of the GNU license requirements, Version 2, June 1991. Everyone is permitted to copy and distribute
verbatim copies of this license document, but changing it is not allowed.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
2
MS Skype for Business
Portions of this software are Copyright (C) 1988, Regents of the University of California. All rights reserved.
Redistribution and use in source and binary forms are permitted provided that the above copyright notice
and this paragraph are duplicated in all such forms and that any documentation, advertising materials, and
other materials related to such distribution and use acknowledge that the software was developed by the
University of California, Berkeley. The name of the University may not be used to endorse or promote
products derived from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING,
WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE.
Portions of this software are Copyright (C) 1998, Massachusetts Institute of Technology
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated
documentation files (the "Software"), to deal in the Software without restriction, including without
limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
Software, and to permit persons to whom the Software is furnished to do so, subject to the following
conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions
of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING
BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
Portions of this software are Copyright (C) 1995-2004, Jean-loup Gailly and Mark Adler
This software is provided 'as-is', without any express or implied warranty. In no event will the authors be
held liable for any damages arising from the use of this software.
Permission is granted to anyone to use this software for any purpose, including commercial applications,
and to alter it and redistribute it freely, subject to the following restrictions:
1. The origin of this software must not be misrepresented; you must not claim that you wrote the original
software. If you use this software in a product, an acknowledgment in the product documentation would
be appreciated but is not required.
2. Altered source versions must be plainly marked as such, and must not be misrepresented as being the
original software.
3. This notice may not be removed or altered from any source distribution.
Portions of this software are Copyright (C) 2003, Internet Systems Consortium
Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is
hereby granted, provided that the above copyright notice and this permission notice appear in all copies.
THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING
ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE
USE OR PERFORMANCE OF THIS SOFTWARE.
Used, under license, U.S. Patent Nos. 6,473,802, 6,374,300, 8,392,563, 8,103,770, 7,831,712, 7,606,912, 7,346,695, 7,287,084 and
6,970,933
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
3
MS Skype for Business
Table of Contents
1
Introduction .................................................................................................................................... 7
1.1
Microsoft Skype for Business 2015 ......................................................................................... 7
1.2
Document Purpose ................................................................................................................. 7
1.3
Prerequisites ........................................................................................................................... 7
2
Load Balancing Microsoft Skype for Business 2015 ........................................................................ 9
3
General Configuration................................................................................................................... 11
3.1
Disable SNAT Globally ........................................................................................................... 11
3.2
Change Drop Connections Settings ....................................................................................... 11
3.3
Increase the Connection Timeout ......................................................................................... 11
3.4
Connection Scaling For Large Scale Deployments ................................................................ 12
3.5
Enable Subnet Originating Requests Globally....................................................................... 13
4
Skype for Business Templates ....................................................................................................... 14
5
Configuring Skype for Business 2015 VSs without Templates ...................................................... 15
5.1
DNS Only Configuration without Templates ......................................................................... 15
5.1.1
Director Internal WebSvc HTTPS Virtual Service .......................................................... 16
5.1.2
Director Internal WebSvc HTTP Virtual Service ............................................................ 17
5.1.3
Front End Internal WebSvc HTTPS Virtual Service ........................................................ 18
5.1.4
Front End Internal WebSvc HTTP Virtual Service .......................................................... 19
5.2
HLB Only Configuration without Templates ......................................................................... 21
5.2.1
Director Internal WebSvc HTTPS Virtual Service .......................................................... 21
5.2.2
Director Internal WebSvc HTTP Virtual Service ............................................................ 22
5.2.3
Front End Internal WebSvc HTTPS Virtual Service ........................................................ 23
5.2.4
Front End Internal WebSvc HTTP Virtual Service .......................................................... 24
5.2.5
Internal Front-End SIP Virtual Service ........................................................................... 26
5.2.6
Internal Front-End DCOM Virtual Service ..................................................................... 27
5.2.7
Director SIP Virtual Service ........................................................................................... 28
5.2.8
Mediation Virtual Service.............................................................................................. 30
5.2.9
Edge Internal AV Media TCP Virtual Service ................................................................. 31
5.2.10
Edge Internal AV Media UDP Virtual Service ................................................................ 33
5.2.11
Edge Internal SIP Virtual Service ................................................................................... 34
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
4
MS Skype for Business
5.3
5.3.1
Edge External SIP Virtual Service .................................................................................. 36
5.3.2
Edge External SIP Federation Virtual Service ................................................................ 37
5.3.3
Edge External XMPP Virtual Service .............................................................................. 38
5.3.4
Edge External Conferencing Virtual Service .................................................................. 39
5.3.5
Edge External AV Media TCP Virtual Service................................................................. 41
5.3.6
Edge External AV Media UDP Virtual Service................................................................ 42
5.4
6
Common to Both without Templates ................................................................................... 43
5.4.1
Office Web App Servers Virtual Service ........................................................................ 43
5.4.2
Director Reverse Proxy HTTP Virtual Service ................................................................ 44
5.4.3
Director Reverse Proxy HTTPS Virtual Service .............................................................. 46
5.4.4
Front End Reverse Proxy HTTP Virtual Service ............................................................. 48
5.4.5
Front-End Reverse Proxy HTTPS Virtual Service ........................................................... 50
Configuring Skype for Business 2015 VSs with Templates ........................................................... 52
6.1
DNS Configuration with Templates....................................................................................... 52
6.1.1
Director DNS.................................................................................................................. 52
6.1.2
Front End DNS ............................................................................................................... 54
6.2
HLB Only Configuration with Templates ............................................................................... 56
6.2.1
Director HLB Only .......................................................................................................... 56
6.2.2
Front End HLB Only ....................................................................................................... 59
6.2.3
Mediation Virtual Service.............................................................................................. 62
6.2.4
Internal Edge HLB Only ................................................................................................. 63
6.3
Configure External Edge Virtual Services with Templates .................................................... 66
6.3.1
Edge External HLB Only ................................................................................................. 66
6.3.2
Edge External Conferencing .......................................................................................... 68
6.3.3
Edge External AV HLB Only ........................................................................................... 69
6.4
7
Configure External Edge Virtual Services without Templates .............................................. 36
Common to Both with Templates ......................................................................................... 71
6.4.1
Office Web App Servers Virtual Service ........................................................................ 71
6.4.2
Director Reverse Proxy.................................................................................................. 72
6.4.3
Front End Reverse Proxy ............................................................................................... 75
Additional Information.................................................................................................................. 78
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
5
MS Skype for Business
7.1
Server Maintenance .............................................................................................................. 78
7.2
Loss of Failover while using DNS ........................................................................................... 78
7.3
Hardware Load Balancing ..................................................................................................... 78
References ............................................................................................................................................ 79
Document History ................................................................................................................................. 80
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
6
MS Skype for Business
Introduction
1 Introduction
KEMP’s LoadMaster family of purpose-built hardware and Virtual LoadMasters (VLMs) offer
advanced Layer 4 and Layer 7 server load balancing, content switching, SSL Acceleration and a
multitude of other advanced Application Delivery and Optimization (ADC) features.
KEMP’s LoadMaster fully supports Microsoft’s key solutions and are approved by Microsoft. The
LoadMaster efficiently distributes user traffic for Microsoft Skype for Business 2015 so that users
get the best experience possible.
The entire KEMP LoadMaster product family, including the Virtual LoadMaster (VLM) supports
Microsoft Skype for Business 2015.
For more information about KEMP Technologies, visit us online at www.kemptechnologies.com.
1.1
Microsoft Skype for Business 2015
Microsoft Skype for Business 2015 is a communications tool which provides services such as
audio/video conferencing, Instant Messaging (IM) and Voice over Internet Protocol (VoIP). These
services can all be accessible from the Internet, or from an internal network. Microsoft Skype for
Business 2015 allows companies to enhance collaboration amongst employees.
A number of enhancements have been made in Microsoft Skype for Business 2015. The network
topology setup is quite similar to the previous version (Lync 2013) but with a number of small
differences. The Director role is still optional and is not recommended. Less servers are needed
because front-end servers can now take the role of Director. A new role has been added called
the Video Interoperability Server (VIS) which acts as an intermediary between third party
teleconference systems and the Skype for Business 2015 deployment.
1.2
Document Purpose
This documentation is intended to provide guidance on how to configure KEMP LoadMaster
products to provide High Availability (HA) for a Microsoft Skype for Business 2015 environment.
This documentation is created using a representative sample environment described later in the
document. As this documentation is not intended to cover every possible deployment scenario it
may not address unique setup or requirements. The KEMP Support Team is available to provide
solutions for scenarios not explicitly defined.
1.3
Prerequisites
It is assumed that the reader is a network administrator or a person otherwise familiar with
networking and general computer terminology. It is further assumed that the Microsoft Skype
for Business 2015 environment has been set up and the KEMP LoadMaster has been installed.
Other LoadMaster documentation can be referred to as needed from
http://kemptechnologies.com/documentation.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
7
MS Skype for Business
Introduction
The minimum requirements that should be met before proceeding are as follows:

LoadMaster firmware version 7.1 or above should be installed

Configured and published Microsoft Skype for Business 2015 architecture with Skype for
Business Topology builder

Installed the Microsoft Servers, Active Directories and followed other Microsoft
requirements

Configured internal and external DNS entries for Front-End, Director and Edge pools

Established access to the LoadMaster Web User Interface (WUI)
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
8
MS Skype for Business
Load Balancing Microsoft Skype for Business 2015
2 Load Balancing Microsoft Skype for Business 2015
Figure 2-1: Skype for Business 2015 Network Topology
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
9
MS Skype for Business
Load Balancing Microsoft Skype for Business 2015
Deploying a Microsoft Skype for Business 2015 environment can require multiple servers in
Front-End pools and Edge server pools. Load balancing is necessary in this situation to distribute
the traffic amongst these servers.
Microsoft Skype for Business 2015 supports two load balancing solutions: DNS load balancing
and Hardware Load Balancing (HLB). Hardware load balancers are also required to provide load
balancing for the internal and external web services when DNS load balancing is used.
Different load balancing methods cannot be used on the Edge internal and Edge external
interfaces, that is, DNS load balancing cannot be used on the Edge internal interface when
hardware load balancing is being used on the Edge external interface. Health checking at the
LoadMaster ensures that, if one of the servers becomes inaccessible, the load balancer will take
the sever offline and automatically re-route and reconnect users to other functioning servers.
KEMP Technology recommend the configuration as depicted in Figure 2-1. If your configuration
differs from the recommended configuration and there are issues deploying the LoadMaster,
please contact the local KEMP Support Team for assistance.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
10
MS Skype for Business
General Configuration
3 General Configuration
Some recommended general LoadMaster configuration settings are outlined below. These
options can be set within the LoadMaster WUI.
3.1
Disable SNAT Globally
By default, global Server Network Address Translation (SNAT) is enabled in the LoadMaster
settings. KEMP recommends disabling SNAT globally when using the LoadMaster with a Skype
for Business 2015 environment. To disable SNAT globally, follow the steps below:
In the main menu, select System Configuration.
Select Miscellaneous Options.
Select Network Options.
Figure 3-1: Disable SNAT globally
Remove the check from the Enable Server NAT check box.
3.2
Change Drop Connections Settings
The LoadMaster must be configured to drop connections on Real Server Failure to have fast
failover for clients to another Real Server.
To configure dropping connections, click System Configuration.
Click Miscellaneous Options.
Click L7 Configuration.
Figure 3-2: Enable Drop at Drain Time End option
Select the Drop Connections on RS failure checkbox.
3.3
Increase the Connection Timeout
The LoadMaster Connection Timeout must be set to one day. The reason why this value can be
set so high is because the LoadMaster monitors client connection to Real Servers and if a server
fails then the LoadMaster can drop the associated client connections to that Real Server. Clients
are disconnected from the LoadMaster and then reconnected to the LoadMaster to connect to
another Real Server.
One day is the maximum value for this setting and it must be used in conjunction with the Drop
Connections on RS failure option.
To configure the Connection Timeout, click System Configuration.
Click Miscellaneous Options.
Click L7 Configuration.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
11
MS Skype for Business
General Configuration
Figure 3-3: Set L7 Connection Drain Time
Enter 86400 (1 day) in the L7 Connection Drain Time (secs) field and click Set Time.
3.4
Connection Scaling For Large Scale Deployments
Execution of this procedure is optional and should be used only in cases where network traffic is
expected to be greater than 64,000 server connections at any one particular time.
L7 Transparency must be disabled in order to use connection scaling.
1. To use connection scaling, click System Configuration.
2. Click Miscellaneous Options.
3. Click L7 Configuration.
Figure 3-4: Allow connection scaling
4. Select the Allow connection scaling over 64K Connections checkbox.
5. Click Virtual Services.
6. Click View/Modify Services.
7. Click the Modify button of the appropriate Virtual IP Address.
8. Expand the Advanced Properties section.
Figure 3-5: Advanced Properties section
9. In the Advanced Properties panel, input a list of Alternate Source Addresses. Multiple
IPV4 addresses must be separated with a space; each must be unallocated and allow 64K
connections.
10. Click the Set Alternate Source Addresses button.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
12
MS Skype for Business
General Configuration
3.5
Enable Subnet Originating Requests Globally
It is best practice to enable the Subnet Originating Requests option globally.
In a one-armed setup (where the Virtual Service and Real Servers are on the same
network/subnet) Subnet Originating Requests is usually not needed. However, enabling Subnet
Originating Requests should not affect the routing in a one-armed setup.
In a two-armed setup where the Virtual Service is on network/subnet A, for example, and the
Real Servers are on network B - Subnet Originating Requests should be enabled on LoadMasters
with firmware version 7.1-16 and above.
When Subnet Originating Requests is enabled, the LoadMaster will route traffic so that the Real
Server will see traffic arriving from the LoadMaster interface that is in that network/subnet.
When Subnet Originating Requests is enabled globally, it is automatically enabled on all Virtual
Services. If the Subnet Originating Requests option is disabled globally, you can choose whether
or not to enable Subnet Originating Requests on a per-Virtual Service basis.
To enable Subnet Originating Requests globally, follow the steps below:
In the main menu of the LoadMaster WUI, go to System Configuration >
Miscellaneous Options > Network Options.
Figure 3-6: Subnet Originating Requests
Tick the Subnet Originating Requests check box.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
13
MS Skype for Business
Skype for Business Templates
4 Skype for Business Templates
KEMP have developed templates containing our recommended settings for Skype for Business.
These templates can be installed on the LoadMaster and used when creating each of the Virtual
Services. Using a template automatically populates the settings in the Virtual Services. This is
quicker and easier than manually configuring each Virtual Service. If needed, changes can be
made to any of the Virtual Service settings after using the template.
Released templates can be downloaded from the Templates section on the KEMP
documentation page: http://kemptechnologies.com/documentation/.
For more information and steps on how to import and use templates, refer to the Virtual
Services and Templates, Feature Description.
For steps on how to create the Virtual Services using the templates, refer to Section 6.
For steps on how to manually add and configure each of the Virtual Services (without using the
templates), refer to Section 5.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
14
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
5 Configuring Skype for Business 2015 VSs without
Templates
This deployment guide covers three types of Virtual Service (VS); DNS Only, HLB only and those
that are common to both types of environment. The below sections provide instructions and
recommended configuration options for setting up a KEMP LoadMaster to work with Skype for
Business 2015 without the use of Virtual Service Templates.
For an explanation of each of the fields mentioned, refer to the
Web User Interface (WUI), Configuration Guide.
5.1
DNS Only Configuration without Templates
Refer to the sections below for instructions on how to set up the LoadMaster using a DNS only
configuration.
Microsoft recommends that DNS load balancing is used for Session Initiation Protocol (SIP)
traffic. Microsoft also recommend that web services are configured to override FQDN for
internal web services.
Source-IP Persistence
Source IP persistence can be used but take care before enabling it because:


Clients from behind a NAT device show up as a single IP
It can result in uneven connection distribution
Cookies
If cookies are used, there is no negative impact. However, there are some requirements:




The cookie must be named MS-WSMAN
It must not expire
It must not be marked httpOnly
Cookie optimization should be turned off
To configure the various Virtual Services, refer to the sections below.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
15
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
5.1.1
Director Internal WebSvc HTTPS Virtual Service
To configure a Virtual Service for Skype for Business Director, follow the steps below:
Click the Add New button.
Figure 5-1: Add New VS screen
Enter a Virtual Address.
Enter 443 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Director Internal WebSvc
HTTPS.
Ensure that TCP is set as the Protocol.
Click Add This Virtual Service.
Figure 5-2 Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 checkbox (if visible) is clear.
b) Ensure the Transparency checkbox is clear.
c) Enter 444 in the Extra Ports field and click the Set Extra Ports button.
d) Select Source IP Address as the Persistence Mode.
e) Select 20 Minutes as the Persistence Timeout.
f) Select least connection as the Scheduling Method.
g) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
16
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-3: Real Servers section
Expand the Real Servers section.
Select TCP Connection Only from the drop-down list.
Enter 5061 in the Checked Port field and click Set Check Port.
5.1.2
Director Internal WebSvc HTTP Virtual Service
To configure a Virtual Service for Skype for Business Director, follow the steps below:
Click the Add New button.
Figure 5-4: Add New VS screen
Enter a Virtual Address.
Enter 80 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Director Internal WebSvc
HTTP.
Ensure that TCP is set as the Protocol.
Click Add This Virtual Service.
Figure 5-5: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 checkbox is clear.
b) Ensure the Transparency checkbox is clear.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
17
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
c) Select Source IP Address as the Persistence Mode.
d) Select 20 Minutes as the Persistence Timeout.
e) Select least connection as the Scheduling Method.
f) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Expand the Real Servers section.
Figure 5-6: Real Servers section
Select TCP Connection Only from the drop-down list.
Enter 5061 in the Checked Port field and click Set Check Port.
5.1.3
Front End Internal WebSvc HTTPS Virtual Service
To configure a HTTPS Virtual Service for Skype for Business Front End Internal WebSvc, follow
the steps below:
Click the Add New button.
Figure 5-7: Add New VS screen
Enter a Virtual Address.
Enter 443 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 FE Internal WebSvc HTTPS.
Ensure that TCP is set as the Protocol.
Click Add This Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
18
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-8: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 checkbox is clear.
b) Ensure the Transparency checkbox is clear.
c) Enter 444 in the Extra Ports field and click the Set Extra Ports button.
d) Select Source IP Address as the Persistence Mode.
e) Select 20 Minutes as the Persistence Timeout.
f) Select least connection as the Scheduling Method.
g) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Figure 5-9: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the drop-down menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
5.1.4
Front End Internal WebSvc HTTP Virtual Service
To configure a Virtual Service for Skype for Business Front End Internal WebSvc HTTP, follow the
steps below:
Click the Add New button.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
19
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-1: Add New VS screen
Enter a Virtual Address.
Enter 80 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 FE Internal WebSvc HTTP.
Ensure that tcp is set as the Protocol.
Click Add This Virtual Service.
Figure 5-2: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 checkbox is clear.
b) Ensure the Transparency checkbox is clear.
c) Select Source IP Address as the Persistence Mode.
d) Select 20 Minutes as the Persistence Timeout.
e) Select least connection as the Scheduling Method.
f) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Figure 5-3: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the drop-down menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
20
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
5.2
HLB Only Configuration without Templates
The HLB only configuration instructions are below.
5.2.1
Director Internal WebSvc HTTPS Virtual Service
To configure a Virtual Service for Skype for Business Director, follow the steps below:
Click the Add New button.
Figure 5-13: Add New VS screen
Enter a Virtual Address.
Enter 443 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Director Internal WebSvc
HTTPS.
Ensure that TCP is set as the Protocol.
Click Add This Virtual Service.
Figure 5-14: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 checkbox is clear.
b) Ensure the Transparency checkbox is clear.
c) Enter 444 in the Extra Ports field and click the Set Extra Ports button.
d) Select Source IP Address as the Persistence Mode.
e) Select 20 Minutes as the Persistence Timeout.
f) Select least connection as the Scheduling Method.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
21
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
g) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Figure 5-15: Real Servers section
Expand the Real Servers section.
Select TCP Connection Only as the Real Server Check Parameters.
Enter 5061 in the Checked Port field and click Set Check Port.
5.2.2
Director Internal WebSvc HTTP Virtual Service
To configure a Virtual Service for Skype for Business Director, follow the steps below:
Click the Add New button.
Figure 5-16: Add New VS screen
Enter a Virtual Address.
Enter 80 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Director Internal WebSvc
HTTP.
Ensure that TCP is set as the Protocol.
Click Add This Virtual Service.
Figure 5-17: Standard Options section
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
22
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 check box is clear.
b) Ensure the Transparency check box is clear.
c) Select Source IP Address as the Persistence Mode.
d) Select 20 Minutes as the Persistence Timeout.
e) Select least connection as the Scheduling Method.
f) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Figure 5-18: Real Servers section
Expand the Real Servers section.
Select TCP Connection Only as the Real Server Check Parameters.
Enter 5061 in the Checked Port field and click Set Check Port.
5.2.3
Front End Internal WebSvc HTTPS Virtual Service
To configure a Virtual Service for Skype for Business Front End Internal WebSvc HTTP, follow the
steps below:
Click the Add New button.
Figure 5-49: Add New VS screen
Enter a Virtual Address.
Enter 443 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 FE Internal WebSvc HTTPS.
Ensure that TCP is set as the Protocol.
Click Add This Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
23
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-20: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 check box is clear.
b) Ensure the Transparency check box is clear.
c) Enter 444 in the Extra Ports field and click the Set Extra Ports button.
d) Select Source IP Address as the Persistence Mode.
e) Select 20 Minutes as the Persistence Timeout.
f) Select least connection as the Scheduling Method.
g) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Figure 5-21: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the drop-down menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
5.2.4
Front End Internal WebSvc HTTP Virtual Service
To configure a Virtual Service for Skype for Business Front End Internal WebSvc HTTP, follow the
steps below:
Click the Add New button.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
24
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-22: Add New VS screen
Enter a Virtual Address.
Enter 80 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 FE Internal WebSvc HTTP.
Ensure that tcp is set as the Protocol.
Click Add This Virtual Service.
Figure 5-23: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 checkbox is clear.
b) Ensure the Transparency checkbox is clear.
c) Select Source IP Address as the Persistence Mode.
d) Select 20 Minutes as the Persistence Timeout.
e) Select least connection as the Scheduling Method.
f) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Figure 5-24: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the drop-down menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
25
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
5.2.5
Internal Front-End SIP Virtual Service
To configure a Virtual Service for Skype for Business Internal Front-End SIP, follow the steps
below:
Click the Add New button.
Figure 5-25: Virtual Service Parameters
Enter a Virtual Address.
Enter 5061 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Internal Front-End SIP.
Ensure that tcp is set as the Protocol.
Click Add This Virtual Service.
Figure 5-26: Basic Properties section
Within the Basic Properties section, select Generic as the Service Type.
Figure 5-27: Standard Options section
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
26
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Expand the Standard Options section and select the following options:
a) Enter 448,5070-5073,5075,5076,5080 in the Extra Ports field and click the Set Extra
Ports button.
b) Select Normal Protocols in the Server Initiating Protocols drop-down menu.
c) Select Source IP Address as the Persistence Mode.
d) Select 20 Minutes as the Persistence Timeout.
e) Select least connection as the Scheduling Method.
f) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Figure 5-28: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the drop-down menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
5.2.6
Internal Front-End DCOM Virtual Service
To configure a Virtual Service for Skype for Business Internal WebSvc HTTP, follow the steps
below:
Click the Add New button.
Figure 5-29: Add New VS screen
Enter a Virtual Address.
Enter 135 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Internal Front-End DCOM.
Ensure that tcp is set as the Protocol.
Click Add This Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
27
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-30: Standard Options section
Expand the Standard Options section and select the following options:
a) Deselect the Transparency checkbox.
b) Select Normal Protocols in the Server Initiating Protocols drop-down menu.
c) Select Source IP Address as the Persistence Mode.
d) Select 20 Minutes as the Persistence Timeout.
e) Select least connection as the Scheduling Method.
f) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Figure 5-31: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the drop-down menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
5.2.7
Director SIP Virtual Service
To configure a Virtual Service for Skype for Business Internal Director SIP, follow the steps below:
Click the Add New button.
Figure 5-32: Add New VS screen
Enter a Virtual Address.
Enter 5061 in the Port field.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
28
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Enter a recognisable Service Name, for example SfB 2015 Internal Director SIP.
Ensure that tcp is set as the Protocol.
Click Add This Virtual Service.
Figure 5-33: Basic Properties section
Within the Basic Properties section, select Generic as the Service Type.
Figure 5-34: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 checkbox is clear.
b) Ensure the Transparency checkbox is clear.
c) Select Normal Protocols in the Server Initiating Protocols drop-down menu.
d) Select Source IP Address as the Persistence Mode.
e) Select 20 Minutes as the Persistence Timeout.
f) Select least connection as the Scheduling Method.
g) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
h) Select the Use Address for Server NAT checkbox.
Figure 5-35: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the drop-down menu.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
29
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
b) Enter 5061 in the Checked Port field and click Set Check Port.
5.2.8
Mediation Virtual Service
DNS-only load balancing is sufficient for Mediation pools. If using the LoadMaster instead of
DNS, load balance only TCP port 5070.
To configure a Virtual Service for Skype for Business Mediation, follow the steps below:
Click the Add New button.
Figure 5-36: Add New VS screen
Enter a Virtual Address.
Enter 5070 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Mediation.
Ensure that TCP is set as the Protocol.
Click Add This Virtual Service.
Figure 5-37: Basic Properties section
Within the Basic Properties section, select Generic as the Service Type.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
30
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-38: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 checkbox is clear.
b) Ensure the Transparency checkbox is clear.
c) Select Normal Protocols in the Server Initiating Protocols drop-down menu.
d) Select Source IP Address as the Persistence Mode.
e) Select 20 Minutes as the Persistence Timeout.
f) Select least connection as the Scheduling Method.
g) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Figure 5-39: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the drop-down menu.
b) Enter 5070 in the Checked Port field and click Set Check Port.
5.2.9
Edge Internal AV Media TCP Virtual Service
This is the failback path for A/V media transfer. It is used for file transfer and desktop sharing.
To configure a Virtual Service for Skype for Business Edge Internal AV Media TCP, follow the
steps below:
Click the Add New button.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
31
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-40: Add New VS screen
Enter a Virtual Address.
Enter 443 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Edge Internal AV Media TCP.
Ensure that TCP is set as the Protocol.
Click Add This Virtual Service.
Figure 5-41: Basic Properties section
Within the Basic Properties section, select Generic as the Service Type.
Figure 5-42: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 check box is clear.
b) Ensure the Transparency check box is clear.
c) Select Normal Protocols in the Server Initiating Protocols drop-down menu.
d) Select Source IP Address as the Persistence Mode.
e) Select 20 Minutes as the Persistence Timeout.
f) Select least connection as the Scheduling Method.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
32
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
g) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Figure 5-43: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the drop-down menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
5.2.10
Edge Internal AV Media UDP Virtual Service
This is the preferred path for A/V media transfer.
To configure a Virtual Service for Skype for Business Edge Internal AV Media UDP, follow the
steps below:
Click the Add New button.
Figure 5-44: Add New VS screen
Enter a Virtual Address.
Enter 3478 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Edge Internal AV Media UDP.
Select udp as the Protocol.
Click Add This Virtual Service.
Expand the Standard Options section.
Figure 5-5: Standard Options
Select Source IP Address as the Persistence Mode.
Select 20 Minutes as the Persistence Timeout.
Select least connection as the Scheduling Method.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
33
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-45: Real Servers section
Expand the Real Servers section.
Select ICMP Ping in the Real Server Check Parameters drop-down menu.
5.2.11
Edge Internal SIP Virtual Service
This is used by Directors and FE Pools.
To configure a Virtual Service for Skype for Business Edge Internal SIP, follow the steps below:
Click the Add New button.
Figure 5-46: Add New VS screen
Enter a Virtual Address.
Enter 5061 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Edge Internal SIP.
Ensure that tcp is set as the Protocol.
Click Add This Virtual Service.
Figure 5-47: Basic Properties section
Within the Basic Properties section, select Generic as the Service Type.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
34
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-48: Standard Options section
Expand the Standard Options section and select the following options:
c) Enter 5062 in the Extra Ports field and click Set Extra Ports.
Port 5062 is used by any FE pool and SBA
d)
e)
f)
g)
h)
i)
j)
Ensure the Transparency checkbox is clear.
Select Normal Protocols in the Server Initiating Protocols drop-down menu.
Select Source IP Address as the Persistence Mode.
Select 20 Minutes as the Persistence Timeout.
Select least connection as the Scheduling Method.
Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout.
Select the Use Address for Server NAT checkbox.
Figure 5-49: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the Real Server Check Parameters drop-down
menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
35
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
5.3
Configure External Edge Virtual Services without
Templates
To configure the various Edge Virtual Services, refer to the sections below.
Load Balancing External Interfaces of Edge Pools using LoadMaster
When load balancing external interfaces of Edge pools, the shared
interface IP should be used as the default gateway on all Edge interfaces.
Also, a publicly routable IP with no NAT or port translation must be used.
5.3.1
Edge External SIP Virtual Service
To configure a Virtual Service for Skype for Business Edge External SIP, follow the steps below:
Click the Add New button.
Figure 5-50: Add New VS screen
Enter a Virtual Address.
Enter 443 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Edge External SIP.
Ensure that tcp is set as the Protocol.
Click Add This Virtual Service.
Figure 5-51: Standard Options section
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
36
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 checkbox is clear.
b) Ensure the Transparency checkbox is clear.
c) Select Source IP Address as the Persistence Mode.
d) Select 20 Minutes as the Persistence Timeout.
e) Select least connection as the Scheduling Method.
f) Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout.
Figure 5-52: Advanced Properties section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the Real Server Check Parameters drop-down
menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
5.3.2
Edge External SIP Federation Virtual Service
To configure a Virtual Service for Skype for Business Edge External SIP Federation, follow the
steps below:
Click the Add New button.
Figure 5-53: Virtual Service Parameters
Enter a Virtual Address.
Enter 5061 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Edge External SIP Federation.
Ensure that tcp is set as the Protocol.
Click Add This Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
37
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-54: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 checkbox is clear.
b) Ensure the Transparency checkbox is clear.
c) Select Source IP Address as the Persistence Mode.
d) Select 20 Minutes as the Persistence Timeout.
e) Select least connection as the Scheduling Method.
f) Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout.
Figure 5-55: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the Real Server Check Parameters drop-down
menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
5.3.3
Edge External XMPP Virtual Service
To configure a Virtual Service for Skype for Business Edge External XMPP, follow the steps below:
Click the Add New button.
Figure 5-56: Add New VS screen
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
38
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Enter a Virtual Address.
Enter 5269 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Edge External XMPP.
Ensure that tcp is set as the Protocol.
Click Add This Virtual Service.
Figure 5-57: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 checkbox is clear.
b) Ensure the Transparency checkbox is clear.
c) Select Source IP Address as the Persistence Mode.
d) Select 20 Minutes as the Persistence Timeout.
e) Select least connection as the Scheduling Method.
f) Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout.
Figure 5-58: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the Real Server Check Parameters drop-down
menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
5.3.4
Edge External Conferencing Virtual Service
To configure a Virtual Service for Skype for Business Edge External Conferencing, follow the steps
below:
Click the Add New button.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
39
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-59: Add New VS screen
Enter a Virtual Address.
Enter 443 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Edge External Conferencing.
Ensure that tcp is set as the Protocol.
Click Add This Virtual Service.
Figure 5-60: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 checkbox is clear.
b) Ensure the Transparency checkbox is clear.
c) Select Source IP Address as the Persistence Mode.
d) Select 20 Minutes as the Persistence Timeout.
e) Select least connection as the Scheduling Method.
f) Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout.
Figure 5-65-7: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the Real Server Check Parameters drop-down
menu.
b) Enter 443 in the Checked Port field and click Set Check Port.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
40
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
5.3.5
Edge External AV Media TCP Virtual Service
To configure a Virtual Service for Skype for Business Edge External AV, follow the steps below:
Click the Add New button.
Figure 5-62: Add New VS screen
Enter a Virtual Address.
Enter 443 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Edge External AV Media TCP.
Ensure that tcp is set as the Protocol.
Click Add This Virtual Service.
Figure 5-63: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 check box is clear.
b) Select Transparency check box.
c) Select Source IP Address as the Persistence Mode.
d) Select 20 Minutes as the Persistence Timeout.
e) Select least connection as the Scheduling Method.
f) Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout.
Figure 5-64: Real Servers section
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
41
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the Real Server Check Parameters drop-down
menu.
b) Enter 443 in the Checked Port field and click Set Check Port.
5.3.6
Edge External AV Media UDP Virtual Service
To configure a Virtual Service for Skype for Business Edge External AV Media UDP, follow the
steps below:
Click the Add New button.
Figure 5-65: Add New VS screen
Enter a Virtual Address.
Enter 3478 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Edge External AV Media UDP.
Select udp as the Protocol.
Click Add This Virtual Service.
Figure 5-66: Standard Options section
Expand the Standard Options section and select the following options:
a) Select Source IP Address as the Persistence Mode.
b) Set the Timeout to 20 Minutes.
c) Select least connection as the Scheduling Method.
Figure 5-67: Real Servers section
Expand the Real Servers section.
Select ICMP Ping in the Real Server Check Parameters drop-down menu.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
42
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Ensure the Forwarding Method is set to Direct Return when adding Real
Servers.
5.4
Common to Both without Templates
The Virtual Services listed below are common to both DNS and HLB configurations.
5.4.1
Office Web App Servers Virtual Service
To configure a Virtual Service for Office Web App Servers, follow the steps below:
Click the Add New button.
Figure 5-68: Add New VS screen
Enter a Virtual Address.
Enter 443 in the Port field.
Enter a recognisable Service Name, for example Office Web App Servers.
Ensure that TCP is set as the Protocol.
Click Add This Virtual Service.
Figure 5-69: SSL Properties section
Expand the SSL Properties section and select the following options:
a) Select the Enabled check box.
b) Select the Reencrypt check box.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
43
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-70:5-8 Standard Options section
Expand the Standard Options section and select the following options:
a) Select Super HTTP and Source IP as the Persistence Mode.
b) Select 30 Minutes as the Persistence Timeout.
c) Select least connection as the Scheduling Method.
d) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Figure 5-72: Real Servers section
Expand the Real Servers section and select the following options:
a) Select HTTPS Protocol in the drop-down menu.
b) Enter /hosting/discovery in the URL field and click Set URL.
c) Select the Use HTTP/1.1 checkbox.
d) Select GET as the HTTP Method.
5.4.2
Director Reverse Proxy HTTP Virtual Service
To configure a Virtual Service for Skype for Business Reverse Proxy HTTP, follow the steps below:
Click the Add New button.
Figure 5-73: Add New VS screen
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
44
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Enter a Virtual Address.
Enter 80 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Director Reverse Proxy HTTP.
Ensure that TCP is set as the Protocol.
Click Add This Virtual Service.
Figure 5-74: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 checkbox is clear.
b) Ensure the Transparency checkbox is clear.
c) Select None as the Persistence Mode.
d) Select least connection as the Scheduling Method.
e) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Figure 5-75: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the drop-down menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
Click the Add New … button to add a Real Server.
Figure 5-76: Add Real Server
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
45
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Enter the Real Server Address for Director(s).
Enter 8080 as the port.
Ensure to not use 80 as the Real Server Port.
Click the Add This Real Server button.
5.4.3
Director Reverse Proxy HTTPS Virtual Service
To configure a Virtual Service for Skype for Business Reverse Proxy HTTPS, follow the steps
below:
Click the Add New button.
Figure 5-77: Add New VS screen
Enter a Virtual Address.
Enter 443 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Director Reverse Proxy
HTTPS.
Ensure that TCP is set as the Protocol.
Click Add This Virtual Service.
Expand the SSL Properties section.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
46
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-78: SSL Properties section
Select the Enabled check box.
Select the Reencrypt checkbox.
Figure 5-79: Standard Options section
Expand the Standard Options section and select the following options:
a) Select None as the Persistence Mode.
b) Select least connection as the Scheduling Method.
c) Enter 1800 as the Idle Connection Timeout value and click Set Idle Timeout.
Figure 5-80: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the drop-down menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
Click the Add New … button to add a Real Server.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
47
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-81: Add a Real Server
Enter the Real Server Address for Director(s).
Enter 4443 as the Port.
Ensure to not use 443 as the Real Server Port.
Click the Add This Real Server button.
5.4.4
Front End Reverse Proxy HTTP Virtual Service
To configure a Virtual Service for Skype for Business Reverse Proxy HTTP, follow the steps below:
Click the Add New button.
Figure 5-9: Add New VS screen
Enter a Virtual Address.
Enter 80 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Front End Reverse Proxy
HTTP.
Ensure that TCP is set as the Protocol.
Click Add This Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
48
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-10: Standard Options section
Expand the Standard Options section and select the following options:
a) Ensure the Force L4 checkbox is clear.
b) Ensure the Transparency checkbox is clear.
c) Select None as the Persistence Mode.
d) Select least connection as the Scheduling Method.
e) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout.
Figure 5-11: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the drop-down menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
Click the Add New button to add a Real Server.
Figure 5-12: Add Real Server
Enter the Real Server Address for the Front End Server(s).
Enter 8080 as the port.
Ensure to not use 80 as the Real Server Port.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
49
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Click the Add This Real Server button.
5.4.5
Front-End Reverse Proxy HTTPS Virtual Service
To configure a Virtual Service for Skype for Business Reverse Proxy HTTPS, follow the steps
below:
Click the Add New button.
Figure 5-13: Add New VS screen
Enter a Virtual Address.
Enter 443 in the Port field.
Enter a recognisable Service Name, for example SfB 2015 Front-End Reverse Proxy
HTTPS.
Ensure that TCP is set as the Protocol.
Click Add This Virtual Service.
Expand the SSL Properties section.
Figure 5-14: SSL Properties section
Select the Enabled check box.
Select the Reencrypt checkbox.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
50
MS Skype for Business
Configuring Skype for Business 2015 VSs without Templates
Figure 5-15: Standard Options section
Expand the Standard Options section and select the following options:
a) Select None as the Persistence Mode.
b) Select least connection as the Scheduling Method.
c) Enter 1800 as the Idle Connection Timeout and click Set Idle Timeout.
Figure 5-16: Real Servers section
Expand the Real Servers section and select the following options:
a) Select TCP Connection Only in the drop-down menu.
b) Enter 5061 in the Checked Port field and click Set Check Port.
Click the Add New button to add a Real Server.
Figure 5-17: Add a Real Server
Enter the Real Server Address for the Front End Server(s).
Enter 4443 as the Port.
Ensure to not use 443 as the Real Server Port.
Click the Add This Real Server button.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
51
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
6 Configuring Skype for Business 2015 VSs with
Templates
This deployment guide covers three types of Virtual Service; DNS Only, HLB only and those that
are common to both types of environment. The below sections provide instructions and
recommended configuration options for setting up a KEMP LoadMaster to work with Skype for
Business 2015 with the use of Virtual Service templates.
For an explanation of each of the fields mentioned, refer to the
Web User Interface (WUI), Configuration Guide.
6.1
DNS Configuration with Templates
Refer to the sections below for instructions on how to set up the LoadMaster using a DNS only
configuration using the KEMP templates.
Microsoft recommends that DNS load balancing is used for Session Initiation Protocol (SIP)
traffic. Microsoft also recommends that web services are configured to override FQDN for
internal web services.
Source IP Persistence
Source IP persistence can be used but take care before enabling it because:


Clients from behind a NAT device show up as a single IP
It can result in uneven connection distribution
Cookies
If cookies are used, there is no negative impact. However, there are some requirements:




The cookie must be named MS-WSMAN
It must not expire
It must not be marked httpOnly
Cookie optimization should be turned off
To configure the various Virtual Services, refer to the sections below.
6.1.1
Director DNS
The Skype Director DNS template contains two Virtual Services.


6.1.1.1
Skype Director DNS - WebSvc HTTP
Skype Director DNS - WebSvc HTTPS
Deploy the Director DNS template
To add the Virtual Services for Skype Director DNS with the template, follow the steps below:
Click the Add New button.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
52
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Figure 6-1: Add New VS screen
Enter a Virtual Address.
Select the Skype Director DNS template from the Use Template drop-down list.
Click Add This Virtual Service.
6.1.1.2
Configure Director WebSvc HTTP Virtual Service
To configure the SfB Director WebSvc HTTP Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-2: View/Modify screen
Click Modify on the Skype Director DNS - WebSvc HTTP Virtual Service.
Expand the Real Servers section.
Click Add New.
Figure 6-1: Add Real Server screen
Enter the Real Server IP Address.
Confirm that Port 80 is entered.
Click Add This Real Server.
6.1.1.3
Configure Director WebSvc HTTPS Virtual Service
To configure the Skype Director DNS - WebSvc HTTPS Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
53
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Figure 6-4: View/Modify screen
Click Modify on the Skype Director DNS - WebSvc HTTPS Virtual Service.
Expand the Real Servers section.
Click Add New.
Figure 6-5: Add Real Server screen
Enter the Real Server IP Address.
Confirm that Port 443 is entered.
Click Add This Real Server.
6.1.2
Front End DNS
The Skype Front End DNS template contains two Virtual Services.


6.1.2.1
Skype Front End DNS - WebSVC HTTP
Skype Front End DNS - WebSVC HTTPS
Deploy Front End DNS template
To add the Virtual Services for Skype for Business Front End with the template, follow the steps
below:
Click the Add New button.
Figure 6-6: Add New VS screen
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
54
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Enter a Virtual Address.
Select the Skype Front End DNS template under Use Template.
Click Add This Virtual Service.
6.1.2.2
Configure Front End WebSvc HTTP Virtual Service
To configure the Skype Front End DNS - WebSVC HTTP Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-7: View/Modify screen
Click Modify on the Skype Front End DNS - WebSVC HTTP Virtual Service.
Expand the Real Servers section.
Click Add New.
Figure 6-2: Real Server parameters
Enter the Real Server IP Address.
Confirm that Port 80 is entered.
Click Add This Real Server.
6.1.2.3
Configure Front End WebSvc HTTPS Virtual Service
To configure the Skype Front End DNS - WebSVC HTTPS Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-9: View/Modify screen
Click Modify on the Skype Front End DNS - WebSVC HTTPS Virtual Service.
Expand the Real Servers section.
Click Add New
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
55
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Figure 6-5: Add Real Server screen
Enter the Real Server IP Address.
Confirm that Port 443 is entered.
Click Add This Real Server.
6.2
HLB Only Configuration with Templates
The HLB only configuration instructions using the KEMP Templates are below.
6.2.1
Director HLB Only
The Skype Director HLB Only template contains three Virtual Services:



6.2.1.1
Skype Director HLB Only - WebSvc HTTP
Skype Director HLB Only - WebSvc HTTPS
Skype Director HLB Only - SIP
Deploy Director HLB Only template
To add the Virtual Services for Skype Director with the template, follow the steps below:
Click the Add New button.
Figure 6-11: Add New VS screen
Enter a Virtual Address.
Select the Skype Director HLB Only template in the Use Template drop-down list.
Click Add This Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
56
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
6.2.1.2
Configure Director WebSvc HTTP Virtual Service
To configure the Skype Director HLB Only - WebSvc HTTP Virtual Service, follow the steps
below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-12: View/Modify screen
Click Modify on the Skype Director HLB Only - WebSvc HTTP Virtual Service.
Expand the Real Servers section.
Click Add New
Figure 6-3: Real Server parameters
Enter the Real Server IP Address.
Confirm that Port 80 is entered.
Click Add This Real Server.
6.2.1.3
Configure Director WebSvc HTTPS Virtual Service
To configure the Skype Director HLB Only - WebSvc HTTPS Virtual Service, follow the steps
below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-14: View/Modify screen
Click Modify on the Skype Director HLB Only - WebSvc HTTPS Virtual Service.
Expand the Real Servers section.
Click Add New.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
57
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Figure 6-15: Add Real Server screen
Enter the Real Server IP Address.
Confirm that Port 443 is entered.
Click Add This Real Server.
6.2.1.4
Configure Director SIP Virtual Service
To configure the Skype Director HLB Only - SIP Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-16: View/Modify screen
Click Modify on the Skype Director HLB Only - SIP Virtual Service.
Expand Real Servers section.
Click Add New.
Figure 6-17: Add Real Server screen
Enter the Real Server IP Address.
Confirm that Port 5061 is entered.
Click Add This Real Server.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
58
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
6.2.2
Front End HLB Only
The Skype Front End HLB Only template contains four Virtual Services:




6.2.2.1
Skype Front End HLB Only - WebSvc HTTP
Skype Front End HLB Only - WebSvc HTTPS
Skype Front End HLB Only - SIP
Skype Front End HLB Only - DCOM
Deploy Front End HLB Only template
To add the Virtual Services for Skype Front End with the template, follow the steps below:
Click the Add New button.
Figure 6-18: Add New VS screen
Enter a Virtual Address.
Select Skype Front End HLB Only in the Use Template drop-down list.
Click Add This Virtual Service.
6.2.2.2
Configure Front End WebSvc HTTP Virtual Service
To configure the Skype Director HLB Only - WebSvc HTTP Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-19: View/Modify screen
Click Modify on the Skype Director HLB Only - WebSvc HTTP Virtual Service.
Expand the Real Servers section.
Click Add New.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
59
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Figure 6-20: Add Real Server screen
Enter the Real Server IP Address.
Confirm that Port 80 is entered.
Click Add This Real Server.
6.2.2.3
Configure the Front End WebSvc HTTPS Virtual Service
To configure the Skype Front End HLB Only - WebSvc HTTPS Virtual Service, follow the steps
below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-21: View/Modify screen
Click Modify on the Skype Front End HLB Only - WebSvc HTTPS Virtual Service.
Figure 6-22: Add Real Server screen
Expand the Real Servers section.
Click Add New.
Enter the Real Server IP Address.
Confirm that Port 443 is entered.
Click Add This Real Server.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
60
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
6.2.2.4
Configure the Front End DCOM Virtual Service
To configure the Skype Front End HLB Only - DCOM Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-23: View/Modify screen
Click Modify on the Skype Front End HLB Only - DCOM Virtual Service.
Expand the Real Servers section.
Click Add New.
Figure 6-24: Add Real Server screen
Enter the Real Server IP Address.
Confirm that Port 135 is entered.
Click Add This Real Server.
6.2.2.5
Configure the Front End SIP Virtual Service
To configure the Skype Front End HLB Only - SIP Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-25: View/Modify screen
Click Modify on the Skype Front End HLB Only - SIP Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
61
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Figure 6-26: Add Real Server screen
Expand the Real Servers section.
Click Add New.
Enter the Real Server IP Address.
Confirm that Port 5061 is entered.
Click Add This Real Server.
6.2.3
Mediation Virtual Service
DNS-only load balancing is sufficient for Mediation pools. If using the LoadMaster instead of
DNS, load balance only TCP port 5070.
To configure a Virtual Service for Skype Mediation with the template, follow the steps below:
Click the Add New button.
Figure 6-27: Add New VS screen
Enter a Virtual Address.
Select Skype Mediation HLB Only in the Use Template drop-down list.
Click Add This Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
62
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Figure 6-28: Add Real Server screen
Expand the Real Servers section.
Click Add New.
Enter the Real Server IP Address.
Confirm that Port 5070 is entered.
Click Add This Real Server.
6.2.4
Internal Edge HLB Only
The Skype Edge Internal HLB Only template contains three Virtual Services:



6.2.4.1
Skype Edge Internal HLB Only - AV Media TCP
Skype Edge Internal HLB Only - AV Media UDP
Skype Edge Internal HLB Only - SIP
Deploy Internal Edge HLB template
To add the Virtual Services for Skype for Business Director with Template, follow the steps
below:
Click the Add New button.
Figure 6-29: Add New VS screen
Enter a Virtual Address.
Select the Skype Edge Internal HLB Only template in the Use Template drop-down list.
Click Add This Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
63
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
6.2.4.2
Configure Internal Edge AV Media TCP Virtual Service
To configure the Skype Edge Internal HLB Only - AV Media TCP Virtual Service, follow the steps
below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-30: View/Modify screen
Click Modify on the Skype Edge Internal HLB Only - AV Media TCP Virtual Service.
Figure 6-31: Add Real Server screen
Expand the Real Servers section.
Click Add New.
Enter the Real Server IP Address.
Confirm that Port 443 is entered.
Click Add This Real Server.
6.2.4.3
Configure the Internal Edge AV Media UDP Virtual Service
To configure the Skype Edge Internal HLB Only - AV Media UDP Virtual Service, follow the steps
below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-32: View/Modify screen
Click Modify on the Skype Edge Internal HLB Only - AV Media UDP Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
64
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Figure 6-33: Add Real Server screen
Expand Real Servers section.
Click Add New.
Enter the Real Server IP Address.
Confirm that Port 3478 is entered.
Click Add This Real Server.
6.2.4.4
Configure Internal Edge SIP Virtual Service
To configure the Skype Edge Internal HLB Only - SIP Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-34: View/Modify screen
Click Modify on the Skype Edge Internal HLB Only - SIP Virtual Service.
Expand the Real Servers section.
Click Add New
Figure 6-35: Add Real Server screen
Enter the Real Server IP Address.
Confirm that Port 5061 is entered.
Click Add This Real Server.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
65
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
6.3
Configure External Edge Virtual Services with Templates
To configure the various Edge Virtual Services with Templates, refer to the sections below.
When load balancing external interfaces of Edge pools, the shared
interface IP should be used as the default gateway on all Edge interfaces.
Also, a publicly routable IP with no NAT or port translation must be used.
6.3.1
Edge External HLB Only
The Skype Edge External HLB Only template contains three Virtual Services:



6.3.1.1
Skype Edge External HLB Only - SIP
Skype Edge External HLB Only - SIP Federation
Skype Edge External HLB Only - XMPP
Deploy the External Edge HLB Template
To add the Virtual Services for Skype Edge External HLB Only with the template, follow the steps
below:
Click the Add New button.
Figure 6-36: Add New VS screen
Enter a Virtual Address.
Select the Skype Edge External HLB Only template in the Use Template drop-down list.
Click Add This Virtual Service.
6.3.1.2
Configure the External SIP Virtual Service
To configure the SfB Edge External SIP Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-37: View/Modify screen
Click Modify on the SfB Edge External SIP Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
66
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Figure 6-38: Add Real Server screen
Expand the Real Servers section.
Click Add New.
Enter the Real Server IP Address.
Confirm that Port 443 is entered.
Click Add This Real Server.
6.3.1.3
Configure the External SIP Federation Virtual Service
To configure the Skype Edge External HLB Only - SIP Federation Virtual Service, follow the steps
below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-39: View/Modify screen
Click Modify on the Skype Edge External HLB Only - SIP Federation Virtual Service.
Figure 6-40: Add Real Server screen
Expand the Real Servers section.
Click Add New.
Enter the Real Server IP Address.
Confirm that Port 5061 is entered.
Click Add This Real Server.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
67
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
6.3.1.4
Configure the External XMPP Virtual Service
To configure the Skype Edge External HLB Only - XMPP Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left hand navigation.
Figure 6-41: View/Modify screen
Click Modify on the Skype Edge External HLB Only - XMPP Virtual Service.
Figure 6-42: Add Real Server screen
Expand Real Servers section.
Click Add New.
Enter the Real Server IP Address.
Confirm that Port 5269 is entered.
Click Add This Real Server.
6.3.2
Edge External Conferencing
To configure a Virtual Service for Skype Edge External Conferencing with the template, follow
the steps below:
Click the Add New button.
Figure 6-43: Add New VS screen
Enter a Virtual Address.
Select the Skype Edge External Conferencing template in the Use Template drop-down
list.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
68
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Click Add This Virtual Service.
Expand the Real Servers section.
Click Add New.
Figure 6-44: Add Real Server screen
Enter the Real Server IP Address.
Confirm that Port 443 is entered.
Click Add This Real Server.
6.3.3
Edge External AV HLB Only
The Skype Edge External AV HLB Only template contains two Virtual Services:


6.3.3.1
Skype Edge External AV HLB Only - Media TCP
Skype Edge External AV HLB Only - Media UDP
Deploy the Edge External AV HLB Template
To add the Virtual Services for Skype Edge External AV with the template, follow the steps
below:
Click the Add New button.
Figure 6-45: Add New VS screen
Enter a Virtual Address.
Select the Skype Edge External AV HLB Only template in the Use Template drop-down
list.
Click Add This Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
69
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
6.3.3.2
Configure the Edge External AV Media TCP Virtual Service
To configure the Skype Edge External AV HLB Only - Media TCP Virtual Service, follow the steps
below:
Select View/Modify Services under Virtual Services in the left hand navigation.
Figure 6-46: View/Modify screen
Click Modify on the Skype Edge External AV HLB Only - Media TCP Virtual Service.
Figure 6-47: Add Real Server screen
Expand the Real Servers section.
Click Add New
Enter the Real Server IP Address.
Confirm that Port 443 is entered.
Click Add This Real Server.
6.3.3.3
Configure the Edge External AV Media UDP Virtual Service
To configure the Skype Edge Internal HLB Only - AV Media UDP Virtual Service, follow the steps
below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-48: View/Modify screen
Click Modify on the Skype Edge Internal HLB Only - AV Media UDP Virtual Service.
Expand the Real Servers section.
Click Add New.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
70
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Figure 6-49: Add Real Server screen
Enter the Real Server IP Address.
Confirm that Port 3478 is entered.
Set the Forwarding Method to Direct Return.
Click Add This Real Server.
Ensure the Forwarding Method is set to Direct Return when adding the
Real Servers.
6.4
Common to Both with Templates
The Virtual Services listed below are common to both DNS and HLB configurations.
6.4.1
Office Web App Servers Virtual Service
To configure a Virtual Service for Office Web App Servers with the template, follow the steps
below:
Click the Add New button.
Figure 6-50: Add New VS screen
Enter a Virtual Address.
Select Skype Office Web App Servers in the Use Template drop-down list.
Click Add This Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
71
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Figure 6-51: SSL Properties section
Select a valid certificate which was previously imported and click the > button to assign
the certificate.
Click Set Certificates.
Expand the Real Servers section.
Click Add New.
Figure 6-52: Add Real Server screen
Enter the Real Server IP Address.
Confirm that Port 443 is entered.
Click Add This Real Server.
6.4.2
Director Reverse Proxy
The Skype Director Reverse Proxy template contains two Virtual Services:

Skype Director Reverse Proxy - HTTP
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
72
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates

6.4.2.1
Skype Director Reverse Proxy - HTTPS
Deploy the Director Reverse Proxy Template
To add the Virtual Services for Skype for Business Director with the template, follow the steps
below:
Click the Add New button.
Figure 6-53: Add New VS screen
Enter a Virtual Address.
Select the Skype Director Reverse Proxy template in the Use Template drop-down list.
Click Add This Virtual Service.
6.4.2.2
Configure Director Reverse Proxy HTTP Virtual Service
To configure the Skype Director Reverse Proxy - HTTP Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-54: View/Modify screen
Click Modify on the Skype Director Reverse Proxy - HTTP Virtual Service.
Figure 6-55: Add Real Server screen
Expand the Real Servers section.
Click Add New.
Enter the Real Server IP Address.
Confirm that Port 8080 is entered.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
73
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Click Add This Real Server.
Ensure to not use 80 as the Real Server Port.
6.4.2.3
Configure the Director Reverse Proxy HTTPS Virtual Service
To configure the Skype Director Reverse Proxy - HTTPS Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-56: View/Modify screen
Click Modify on the Skype Director Reverse Proxy - HTTPS Virtual Service.
Expand the SSL Properties section.
Figure 6-57: SSL Properties section
Select a valid certificate which was previously imported and click the > button to assign
the certificate.
Click Set Certificates.
Expand the Real Servers section.
Click Add New.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
74
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Figure 6-58: Add Real Server screen
Enter the Real Server IP Address.
Confirm that Port 4443 is entered.
Click Add This Real Server.
Ensure to not use 443 as the Real Server Port.
6.4.3
Front End Reverse Proxy
The Skype for Business 2015 Front End Reverse Proxy template contains two Virtual Services:


6.4.3.1
Skype Front End Reverse Proxy - HTTP
Skype Front End Reverse Proxy - HTTPS
Deploy the Front End Reverse Proxy Template
To add the Virtual Services for Skype Front End Reverse Proxy with the template, follow the
steps below:
Click the Add New button.
Figure 6-59: Add New VS screen
Enter a Virtual Address.
Select the Skype For Business 2015 Front End Reverse Proxy template in the Use
Template drop-down list.
Click Add This Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
75
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
6.4.3.2
Configure the Front End Reverse Proxy HTTP Virtual Service
To configure the Skype Front End Reverse Proxy - HTTP Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-60: View/Modify screen
Click Modify on the Skype Front End Reverse Proxy - HTTP Virtual Service.
Figure 6-61: Add Real Server screen
Expand the Real Servers section.
Click Add New.
Enter the Real Server IP Address.
Confirm that Port 8080 is entered.
Click Add This Real Server.
Ensure to not use 80 as the Real Server Port.
6.4.3.3
Configure the Front End Reverse Proxy HTTPS Virtual Service
To configure the Skype Front End Reverse Proxy - HTTPS Virtual Service, follow the steps below:
Select View/Modify Services under Virtual Services in the left-hand navigation.
Figure 6-62: View/Modify screen
Click Modify on the Skype Front End Reverse Proxy - HTTPS Virtual Service.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
76
MS Skype for Business
Configuring Skype for Business 2015 VSs with Templates
Figure 6-63: SSL Properties section
Select a valid certificate which was previously imported and click the > button to assign
the certificate.
Click Set Certificates.
Expand the Real Servers section.
Click Add New.
Figure 6-64: Add Real Server screen
Enter the Real Server IP Address.
Confirm that Port 4443 is entered.
Click Add This Real Server.
Ensure to not use 443 as the Real Server Port.
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
77
MS Skype for Business
Additional Information
7 Additional Information
Some additional information that may be of use is contained within the sections below.
7.1
Server Maintenance
When blocking traffic to a server during maintenance, removing the server IP entry from the
pool Fully Qualified Domain Name (FQDN) is not sufficient. The server entry must be removed
from the DNS. As the server to server traffic is topology-aware, in order to block server to server
traffic the server must be removed from the DNS topology.
7.2
Loss of Failover while using DNS
Loss of failover when load balancing Edge pools using DNS is possible in the following scenarios:




7.3
Federation with organizations running OCS versions older than Lync 2010
PIM connectivity with Skype, Windows Live, AOL, Yahoo! and XMPP partners
UM Play on Phone functionality
Transferring calls from UM Auto Attendant
Hardware Load Balancing
If hardware load balancing is being used, a list of the ports that must be open can be found here:
http://technet.microsoft.com/en-us/library/gg398833.aspx
Hardware load balancing Edge servers requires N+1 Public IP addresses.
Refer to the link below for further information on hardware load balancing:

https://technet.microsoft.com/en-us/library/gg615011.aspx
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
78
MS Skype for Business
References
References
The following sources are referred to in this document:
KEMP Technologies website
www.kemptechnologies.com
KEMP Technologies Documentation page
http://kemptechnologies.com/documentation
Web User Interface (WUI), Configuration Guide
http://kemptechnologies.com/documentation
Virtual Services and Templates, Feature Description
http://kemptechnologies.com/documentation
Ports and Protocols for Internal Servers
http://technet.microsoft.com/en-us/library/gg398833.aspx
Port Summary - Scaled Consolidated Edge with Hardware Load Balancers
http://technet.microsoft.com/en-us/library/gg398739.aspx
Scaled Consolidated Edge with Hardware Load Balancers
http://technet.microsoft.com/en-us/library/gg398478.aspx
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
79
MS Skype for Business
Document History
Document History
Date
Change
Reason for Change
Version
Resp.
Aug 2015
Initial draft
First draft of document
1.0
LB
Sep 2015
Minor updates
Updated to reflect templates
2.0
LB
Oct 2015
Screenshot updates
LoadMaster WUI reskin
3.0
KG
Nov 2015
Minor updates
Small changes made
4.0
LB
Dec 2015
Release updates
Updates for 7.1-32
5.0
LB
Jan 2016
Minor updates
Updated Copyright Notices
6.0
LB
Mar 2016
Minor updates
Enhancements made
7.0
LB
Oct 2016
Release updates
Updates for 7.2.36
8.0
POC
Jan 2017
Minor updates
Enhancements made
9.0
LB
Copyright © 2002 - 2017 KEMP Technologies, Inc. All Rights Reserved.
80