MS Lync 2013 Deployment Guide VERSION: 7.0 UPDATED: JULY 2016
Copyright Notices Copyright 2002-2016 KEMP Technologies, Inc.. All rights reserved.. KEMP Technologies and the KEMP Technologies logo are registered trademarks of KEMP Technologies, Inc.. KEMP Technologies, Inc. reserves all ownership rights for the LoadMaster product line including software and documentation. The use of the LoadMaster Exchange appliance is subject to the license agreement. Information in this guide may be modified at any time without prior notice. Microsoft Windows is a registered trademarks of Microsoft Corporation in the United States and other countries. All other trademarks and service marks are the property of their respective owners. Limitations: This document and all of its contents are provided as-is. KEMP Technologies has made efforts to ensure that the information presented herein are correct, but makes no warranty, express or implied, about the accuracy of this information. If any material errors or inaccuracies should occur in this document, KEMP Technologies will, if feasible, furnish appropriate correctional notices which Users will accept as the sole and exclusive remedy at law or in equity. Users of the information in this document acknowledge that KEMP Technologies cannot be held liable for any loss, injury or damage of any kind, present or prospective, including without limitation any direct, special, incidental or consequential damages (including without limitation lost profits and loss of damage to goodwill) whether suffered by recipient or third party or from any action or inaction whether or not negligent, in the compiling or in delivering or communicating or publishing this document. Any Internet Protocol (IP) addresses, phone numbers or other data that may resemble actual contact information used in this document are not intended to be actual addresses, phone numbers or contact information. Any examples, command display output, network topology diagrams, and other figures included in this document are shown for illustrative purposes only. Any use of actual addressing or contact information in illustrative content is unintentional and coincidental. Portions of this software are; copyright (c) 2004-2006 Frank Denis. All rights reserved; copyright (c) 2002 Michael Shalayeff. All rights reserved; copyright (c) 2003 Ryan McBride. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. THIS SOFTWARE IS PROVIDED BY THE ABOVE COPYRIGHT HOLDERS ''AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE ABOVE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. The views and conclusions contained in the software and documentation are those of the authors and should not be interpreted as representing official policies, either expressed or implied, of the above copyright holders.. Portions of the LoadMaster software are copyright (C) 1989, 1991 Free Software Foundation, Inc. -51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA- and KEMP Technologies Inc. is in full compliance of the GNU license requirements, Version 2, June 1991. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 2
Portions of this software are Copyright (C) 1988, Regents of the University of California. All rights reserved. Redistribution and use in source and binary forms are permitted provided that the above copyright notice and this paragraph are duplicated in all such forms and that any documentation, advertising materials, and other materials related to such distribution and use acknowledge that the software was developed by the University of California, Berkeley. The name of the University may not be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Portions of this software are Copyright (C) 1998, Massachusetts Institute of Technology Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Portions of this software are Copyright (C) 1995-2004, Jean-loup Gailly and Mark Adler This software is provided 'as-is', without any express or implied warranty. In no event will the authors be held liable for any damages arising from the use of this software. Permission is granted to anyone to use this software for any purpose, including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented; you must not claim that you wrote the original software. If you use this software in a product, an acknowledgment in the product documentation would be appreciated but is not required. 2. Altered source versions must be plainly marked as such, and must not be misrepresented as being the original software. 3. This notice may not be removed or altered from any source distribution. Portions of this software are Copyright (C) 2003, Internet Systems Consortium Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies. THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. Used, under license, U.S. Patent Nos. 6,473,802, 6,374,300, 8,392,563, 8,103,770, 7,831,712, 7,606,912, 7,346,695, 7,287,084 and 6,970,933 Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 3
Table of Contents 1 Introduction... 6 1.1 Microsoft Lync 2013... 6 1.2 Document Purpose... 6 1.3 Prerequisites... 6 2 Load Balancing Microsoft Lync 2013... 8 3 General Configuration... 10 3.1 Disable SNAT Globally... 10 3.2 Subnet Originating Requests... 10 3.3 Change Drop Connections Settings... 11 3.4 Increase the Connection Timeout... 12 3.5 Connection Scaling For Large Scale Deployments... 13 4 Lync 2013 Template... 16 5... 17 5.1 DNS Only Configuration... 17 5.1.1 Lync Internal WebSvc HTTPS Virtual Service... 17 5.1.2 Lync Director 2013 DNS Virtual Service... 19 5.1.3 Lync Internal WebSvc HTTP Virtual Service... 20 5.2 HLB Only Configuration... 21 5.2.1 Lync Director 2013 HLB Virtual Service... 21 5.2.2 Lync Internal Director SIP Virtual Service... 22 5.2.3 Lync Mediation Virtual Service... 23 5.2.4 Lync Edge Internal AV Media TCP Virtual Service... 25 5.2.5 Lync Edge Internal AV Media UDP Virtual Service... 26 5.2.6 Lync Edge Internal SIP Virtual Service... 27 5.2.7 Lync Internal WebSvc HTTP Virtual Service... 29 5.2.8 Lync Internal Front-End DCOM Virtual Service... 30 5.2.9 Lync Internal WebSvc HTTPS Virtual Service... 31 5.2.10 Lync Internal Front-End SIP Virtual Service... 32 5.2.11 Configure Edge Virtual Services... 33 5.3 Common to Both... 40 Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 4
5.3.1 Lync Office Web App Servers Virtual Service... 40 5.3.2 Lync Director Reverse Proxy HTTP Virtual Service... 43 5.3.3 Lync Director Reverse Proxy HTTPS Virtual Service... 44 5.3.4 Lync Front End Reverse Proxy HTTP Virtual Service... 46 5.3.5 Lync Front End Reverse Proxy HTTPS Virtual Service... 48 6 Additional Information... 51 6.1 Server Maintenance... 51 6.2 Loss of Failover while using DNS... 51 6.3 Hardware Load Balancing... 51 References... 52 Document History... 53 Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 5
Introduction 1 Introduction KEMP s LoadMaster family of purpose-built hardware and Virtual Appliances (VLM) offer advanced Layer 4 and Layer 7 server load balancing, content switching, SSL Acceleration and a multitude of other advanced Application Delivery and Optimization (ADC) features. KEMP s LoadMaster fully supports Microsoft s key solutions and are approved by Microsoft (KEMP is a Microsoft Gold partner). The LoadMaster efficiently distributes user traffic for Microsoft Lync 2013 so that users get the best experience possible. The entire KEMP LoadMaster product family, including the Virtual LoadMaster (VLM) supports Microsoft Lync 2013. For more information about KEMP Technologies, visit us online at www.kemptechnologies.com. 1.1 Microsoft Lync 2013 Microsoft Lync is a communications tool which provides services such as audio/video conferencing, Instant Messaging (IM) and Voice over Internet Protocol (VoIP). These services can all be accessible from the Internet, or from an internal network. Microsoft Lync allows companies to enhance collaboration amongst employees. A number of enhancements have been made in Microsoft Lync 2013. The network topology setup is quite similar to the previous version but with a number of small differences. Changes include the consolidation of the archiving and monitoring features towards the front-end servers (optional feature). The Lync 2010 Director role is now optional and is not recommended anymore. Less servers are needed because front-end servers can now take the role of Director. 1.2 Document Purpose This documentation is intended to provide guidance on how to configure KEMP LoadMaster products to provide high availability for a Microsoft Lync Server 2013 environment. This documentation is created using a representative sample environment described later in the document. As this documentation is not intended to cover every possible deployment scenario it may not address unique setup or requirements. The KEMP Support Team is available to provide solutions for scenarios not explicitly defined. 1.3 Prerequisites It is assumed that the reader is a network administrator or a person otherwise familiar with networking and general computer terminology. It is further assumed that the Microsoft Lync Server 2013 environment has been set up and the KEMP LoadMaster has been installed. Other LoadMaster documentation can be referred to as needed from http://www.kemptechnologies.com/documentation. The minimum requirements that should be met before proceeding are as follows: LoadMaster firmware version 7.0-6 or above should be installed Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 6
Introduction Configured and published Microsoft Lync Server architecture with Lync Topology builder Installed the Microsoft Servers, Active Directories and followed other Microsoft requirements Configured internal and external DNS entries for Front-End, Director and Edge pools Established access to the LoadMaster Web User Interface (WUI) Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 7
Load Balancing Microsoft Lync 2013 2 Load Balancing Microsoft Lync 2013 Figure 2-1: Lync 2013 Network Topology Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 8
Load Balancing Microsoft Lync 2013 Deploying a Microsoft Lync environment can require multiple servers in Front-End pools and Edge server pools. Load balancing is necessary in this situation to distribute the traffic amongst these servers. Microsoft Lync Server 2013 supports two load balancing solutions: DNS load balancing and Hardware Load Balancing (HLB). Hardware load balancers are also required to provide load balancing for the internal and external web services when DNS load balancing is used. Different load balancing methods cannot be used on the Edge internal and Edge external interfaces, i.e. DNS load balancing cannot be used on the Edge internal interface when hardware load balancing is being used on the Edge external interface. Health checking at the LoadMaster ensures that, if one of the servers becomes inaccessible, the load balancer will take the sever offline and automatically re-route and reconnect users to other functioning servers. KEMP Technology recommend the configuration as depicted in Figure 2.1. If your configuration differs from the recommended configuration and there are issues deploying the LoadMaster, please contact the local KEMP Support Team for assistance. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 9
General Configuration 3 General Configuration Some recommended general LoadMaster configuration settings are outlined below. These options can be set within the LoadMaster WUI. 3.1 Disable SNAT Globally By default, global Server Network Address Translation (SNAT) is enabled in the LoadMaster settings. KEMP recommends disabling SNAT globally when using the LoadMaster with a Lync 2013 environment. To disable SNAT globally, follow the steps below: 1. In the main menu, select System Configuration. 2. Select Miscellaneous Options. 3. Select Network Options. Figure 3-1: Disable SNAT globally 4. Remove the check from the Enable Server NAT check box. 3.2 Subnet Originating Requests When the LoadMaster is deployed in a two-armed configuration, KEMP recommends enabling Subnet Originating Requests. When this option is enabled, the LoadMaster will use its local IP address, instead of the IP address of the Virtual Service, when communicating to the Real Servers. Subnet Originating Requests can be enabled on a per-virtual Service or a global basis. It is recommended that the Subnet Originating Requests option is enabled on a per-virtual Service basis. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 10
General Configuration To enable Subnet Originating Requests globally, follow the steps below: 1. In the main menu of the LoadMaster WUI, select System Configuration > Miscellaneous Options > Network Options. Figure 3-2: Network Options 2. Select the Subnet Originating Requests check box. 3.3 Change Drop Connections Settings The LoadMaster must be configured to drop connections on Real Server Failure in order to have fast failover for clients to another Real Server. 1. To configure dropping connections, click System Configuration. 2. Click Miscellaneous Options. 3. Click L7 Configuration. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 11
General Configuration Figure 3-3: Enable Drop Connections on RS failure option 4. Select the Drop Connections on RS failure checkbox. 3.4 Increase the Connection Timeout The Loadmaster Connection Timeout must be set to one day. The reason why this value can be set so high is because the LoadMaster monitors client connection to Real Servers and if a server fails then the LoadMaster can drop the associated client connections to that real server. Clients are disconnected from the LoadMaster and then reconnected to the LoadMaster to connect to another Real Server. One day is the maximum value for this setting and it must be used in conjunction with the Drop Connections on RS failure option. 1. To configure the Connection Timeout, click System Configuration. 2. Click Miscellaneous Options. 3. Click L7 Configuration. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 12
General Configuration Figure 3-4: Set L7 Connection Drain Time 4. Enter 86400 (1 day) in the L7 Connection Drain Time (secs) field and click Set Time. 3.5 Connection Scaling For Large Scale Deployments Execution of this procedure is optional and should be used only in cases where network traffic is expected to be greater than 64,000 server connections at any one particular time. L7 Transparency must be disabled in order to use connection scaling. 1. To use connection scaling, click System Configuration. 2. Click Miscellaneous Options. 3. Click L7 Configuration. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 13
General Configuration Figure 3-5: Allow connection scaling 4. Select the Allow connection scaling over 64K Connections checkbox. 5. Click Virtual Services. 6. Click View/Modify Services. 7. Click the Modify button of the appropriate Virtual IP Address. 8. Expand the Advanced Properties section. Figure 3-6: Advanced Properties section Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 14
General Configuration 9. In the Advanced Properties panel, input a list of Alternate Source Addresses. Multiple IPV4 addresses must be separated with a space; each must be unallocated and allow 64K connections. 10. Click the Set Alternate Source Addresses button. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 15
Lync 2013 Template 4 Lync 2013 Template KEMP have developed a template containing our recommended settings for Lync 2013. This template can be installed on the LoadMaster and can be used when creating each of the Virtual Services. Using a template automatically populates the settings in the Virtual Services. This is quicker and easier than manually configuring each Virtual Service. If needed, changes can be made to any of the Virtual Service settings after using the template. Released templates can be downloaded from the KEMP documentation page: http://www.kemptechnologies.com/documentation/. If you create another Virtual Service using the same template, ensure to change the Service Name to a unique name. For more information and steps on how to import and use templates, refer to the Virtual Services and Templates, Feature Description. For steps on how to manually add and configure each of the Virtual Services, refer to Section 5. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 16
5 This deployment guide covers three types of Virtual Service; DNS Only, HLB only and those that are common to both types of environment. The below sections provide instructions and recommended configuration options for setting up a KEMP LoadMaster to work with Lync 2013 using these configuration options. For an explanation of each of the fields mentioned, refer to the Web User Interface (WUI), Configuration Guide. 5.1 DNS Only Configuration Refer to the sections below for instructions on how to set up the LoadMaster using a DNS only configuration. Microsoft recommends that DNS load balancing is used for Session Initiation Protocol (SIP) traffic. Microsoft also recommend that web services are configured to override FQDN for internal web services. Source-IP Persistence Source IP persistence can be used but take care before enabling it because: Clients from behind an NAT device show up as a single IP It can result in uneven connection distribution Cookies If cookies are used, there is no negative impact. However, there are some requirements: The cookie must be named MS-WSMAN It must not expire It must not be marked httponly Cookie optimization should be turned off To configure the various Front-End Virtual Services, refer to the sections below. 5.1.1 Lync Internal WebSvc HTTPS Virtual Service To configure a Virtual Service for Lync Internal WebSvc HTTP, follow the steps below: 1. Click the Add New button. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 17
Figure 5-15-2: Add New VS screen 2. Enter a Virtual Address. 3. Enter 443 in the Port field. 4. Enter a recognisable Service Name, for example Lync Internal WebSvc HTTPS. 5. Ensure that TCP is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-35-4: Standard Options section 7. Expand the Standard Options section and select the following options: a) Deselect the Force L7 checkbox (if visible). b) Enter 4443 in the Extra Ports field and click Set Extra Ports. c) Deselect the Transparency checkbox. d) Select Source IP Address as the Persistence Mode. e) Select 20 Minutes as the Persistence Timeout. f) Select least connection as the Scheduling Method. g) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout. Figure 5-55-6: Real Servers section 8. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 18
5.1.2 Lync Director 2013 DNS Virtual Service To configure a Virtual Service for Lync Director, follow the steps below: 1. Click the Add New button. Figure 5-7: Add New VS screen 2. Enter a Virtual Address. 3. Enter 443 in the Port field. 4. Enter a recognisable Service Name, for example Lync Director. 5. Ensure that TCP is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-8: Standard Options section 7. Expand the Standard Options section and select the following options: a) Enter 444,4443 in the Extra Ports field and click the Set Extra Ports button. b) Remove the tick from the Transparency check box. c) Select Source IP Address as the Persistence Mode. d) Select 20 Minutes as the Persistence Timeout. e) Select least connection as the Scheduling Method. f) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout. Figure 5-9: Real Servers section Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 19
8. Expand the Real Servers section. 9. Select TCP Connection Only as the Real Server Check Parameters. 10. Enter 5061 in the Checked Port field and click Set Check Port. 5.1.3 Lync Internal WebSvc HTTP Virtual Service To configure a Virtual Service for Lync Internal WebSvc HTTP, follow the steps below: 1. Click the Add New button. Figure 5-10: Add New VS screen 2. Enter a Virtual Address. 3. Enter 80 in the Port field. 4. Enter a recognisable Service Name, for example Lync Internal WebSvc HTTP. 5. Ensure that tcp is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-11: Standard Options section 7. Expand the Standard Options section and select the following options: a) Deselect the Force L7 checkbox (if visible). b) Enter 8080 in the Extra Ports text box and click the Set Extra Ports button. c) Deselect the Transparency checkbox. d) Select Source IP Address as the Persistence Mode. e) Select 20 Minutes as the Persistence Timeout. f) Select least connection as the Scheduling Method. g) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 20
Figure 5-12: Real Servers section 8. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. 5.2 HLB Only Configuration The HLB only configuration instructions are below. 5.2.1 Lync Director 2013 HLB Virtual Service To configure a Virtual Service for Lync Director, follow the steps below: 1. Click the Add New button. Figure 5-13: Add New VS screen 2. Enter a Virtual Address. 3. Enter 443 in the Port field. 4. Enter a recognisable Service Name, for example Lync Director. 5. Ensure that TCP is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-14: Standard Options section 7. Expand the Standard Options section and select the following options: Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 21
a) Enter 444,4443 in the Extra Ports field and click the Set Extra Ports button. b) Remove the tick from the Transparency check box. c) Select Source IP Address as the Persistence Mode. d) Select 20 Minutes as the Persistence Timeout. e) Select least connection as the Scheduling Method. f) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout. Figure 5-15: Real Servers section 8. Expand the Real Servers section. 9. Select TCP Connection Only as the Real Server Check Parameters. 10. Enter 5061 in the Checked Port field and click Set Check Port. 5.2.2 Lync Internal Director SIP Virtual Service To configure a Virtual Service for Lync Internal Director SIP, follow the steps below: 1. Click the Add New button. Figure 5-16: Add New VS screen 2. Enter a Virtual Address. 3. Enter 5061 in the Port field. 4. Enter a recognisable Service Name, for example Lync Internal Director SIP. 5. Ensure that tcp is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-17: Basic Properties section 7. Within the Basic Properties section, select Generic as the Service Type. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 22
Figure 5-18: Standard Options section 8. Expand the Standard Options section and select the following options: a) Select the Force L7 checkbox. b) Deselect the Transparency checkbox. c) Select Normal Protocols in the Server Initiating Protocols drop-down menu. d) Select Source IP Address as the Persistence Mode. e) Select 20 Minutes as the Persistence Timeout. f) Select least connection as the Scheduling Method. g) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout. Figure 5-19: Real Servers section 9. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. 5.2.3 Lync Mediation Virtual Service DNS-only load balancing is sufficient for Mediation pools. If using the LoadMaster instead of DNS, load balance only TCP port 5070. To configure a Virtual Service for Lync Mediation, follow the steps below: 1. Click the Add New button. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 23
Figure 5-205-21: Add New VS screen 2. Enter a Virtual Address. 3. Enter 5070 in the Port field. 4. Enter a recognisable Service Name, for example Lync Mediation. 5. Ensure that TCP is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-225-23: Basic Properties section 7. Within the Basic Properties section, select Generic as the Service Type. Figure 5-245-25: Standard Options section 8. Expand the Standard Options section and select the following options: a) Select the Force L7 checkbox. b) Ensure that the Transparency checkbox is not selected. c) Select Normal Protocols in the Server Initiating Protocols drop-down menu. d) Select Source IP Address as the Persistence Mode. e) Select 20 Minutes as the Persistence Timeout. f) Select least connection as the Scheduling Method. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 24
g) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout. Figure 5-265-27: Real Servers section 9. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the drop-down menu. b) Enter 5070 in the Checked Port field and click Set Check Port. 5.2.4 Lync Edge Internal AV Media TCP Virtual Service This is the failback path for A/V media transfer. It is used for file transfer and desktop sharing. To configure a Virtual Service for Lync Edge Internal AV Media TCP, follow the steps below: 1. Click the Add New button. Figure 5-28: Add New VS screen 2. Enter a Virtual Address. 3. Enter 443 in the Port field. 4. Enter a recognisable Service Name, for example Lync Edge Internal AV Media TCP. 5. Ensure that TCP is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-29: Basic Properties section 7. Within the Basic Properties section, select Generic as the Service Type. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 25
Figure 5-30: Standard Options section 8. Expand the Standard Options section and select the following options: a) Ensure that the Force L7 check box is selected. b) Ensure that the Transparency check box is not selected. c) Select Normal Protocols in the Server Initiating Protocols drop-down menu. d) Select Source IP Address as the Persistence Mode. e) Select 20 Minutes as the Persistence Timeout. f) Select least connection as the Scheduling Method. g) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout. Figure 5-31: Real Servers section 9. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. 5.2.5 Lync Edge Internal AV Media UDP Virtual Service This is the preferred path for A/V media transfer. To configure a Virtual Service for Lync Edge Internal AV Media UDP, follow the steps below: 1. Click the Add New button. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 26
Figure 5-32: Add New VS screen 2. Enter a Virtual Address. 3. Enter 3478 in the Port field. 4. Enter a recognisable Service Name, for example Lync Edge Internal AV Media UDP. 5. Select udp as the Protocol. 6. Click Add This Virtual Service. Figure 5-33: Real Servers section 7. Expand the Real Servers section. 8. Select ICMP Ping in the Real Server Check Parameters drop-down menu. 5.2.6 Lync Edge Internal SIP Virtual Service This is used by Directors and FE Pools. To configure a Virtual Service for Lync Edge Internal SIP, follow the steps below: 1. Click the Add New button. Figure 5-34: Add New VS screen 2. Enter a Virtual Address. 3. Enter 5061 in the Port field. 4. Enter a recognisable Service Name, for example Lync Edge Internal SIP. 5. Ensure that tcp is set as the Protocol. 6. Click Add This Virtual Service. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 27
Figure 5-35: Basic Properties section 7. Within the Basic Properties section, select Generic as the Service Type. Figure 5-36: Standard Options section 8. Expand the Standard Options section and select the following options: a) Deselect the Force L7 checkbox. b) Enter 5062 in the Extra Ports field and click Set Extra Ports. Port 5062 is used by any FE pool and SBA c) Remove the check from the Transparency checkbox. d) Select Normal Protocols in the Server Initiating Protocols drop-down menu. e) Select Source IP Address as the Persistence Mode. f) Select 20 Minutes as the Persistence Timeout. g) Select least connection as the Scheduling Method. h) Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout. Figure 5-37: Real Servers section 9. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the Real Server Check Parameters drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 28
5.2.7 Lync Internal WebSvc HTTP Virtual Service To configure a Virtual Service for Lync Internal WebSvc HTTP, follow the steps below: 1. Click the Add New button. Figure 5-38: Add New VS screen 2. Enter a Virtual Address. 3. Enter 80 in the Port field. 4. Enter a recognisable Service Name, for example Lync Internal WebSvc HTTP. 5. Ensure that tcp is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-39: Standard Options section 7. Expand the Standard Options section and select the following options: a) Deselect the Force L7 checkbox (if visible). b) Enter 8080 in the Extra Ports text box and click the Set Extra Ports button. c) Deselect the Transparency checkbox. d) Select Source IP Address as the Persistence Mode. e) Select 20 Minutes as the Persistence Timeout. f) Select least connection as the Scheduling Method. g) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout. Figure 5-40: Real Servers section Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 29
8. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. 5.2.8 Lync Internal Front-End DCOM Virtual Service To configure a Virtual Service for Lync Internal WebSvc HTTP, follow the steps below: 1. Click the Add New button. Figure 5-41: Add New VS screen 2. Enter a Virtual Address. 3. Enter 135 in the Port field. 4. Enter a recognisable Service Name, for example Lync Internal Front-End DCOM. 5. Ensure that tcp is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-42: Standard Options section 7. Expand the Standard Options section and select the following options: a) Deselect the Transparency checkbox. b) Select Normal Protocols in the Server Initiating Protocols drop-down menu. c) Select Source IP Address as the Persistence Mode. d) Select 20 Minutes as the Persistence Timeout. e) Select least connection as the Scheduling Method. f) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 30
Figure 5-43: Real Servers section 8. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. 5.2.9 Lync Internal WebSvc HTTPS Virtual Service To configure a Virtual Service for Lync Internal WebSvc HTTPS HLB Only, follow the steps below: 1. Click the Add New button. Figure 5-44: Add New VS screen 2. Enter a Virtual Address. 3. Enter 443 in the Port field. 4. Enter a recognisable Service Name, for example Lync Internal WebSvc HTTPS HLB Only. 5. Ensure that tcp is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-45: Standard Options section 7. Expand the Standard Options section and select the following options: a) Deselect the Force L7 checkbox (if visible). b) Enter 444,4443 in the Extra Ports field and click Set Extra Ports. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 31
c) Deselect the Transparency checkbox. d) Select Source IP Address as the Persistence Mode. e) Select 20 Minutes as the Persistence Timeout. f) Select least connection as the Scheduling Method. g) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout. Figure 5-46: Real Servers section 8. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. 5.2.10 Lync Internal Front-End SIP Virtual Service To configure a Virtual Service for Lync Internal Front-End SIP, follow the steps below: 1. Click the Add New button. Figure 5-47: Add New VS screen 2. Enter a Virtual Address. 3. Enter 5061 in the Port field. 4. Enter a recognisable Service Name, for example Lync Internal Front-End SIP. 5. Ensure that tcp is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-48: Basic Properties section 7. Within the Basic Properties section, select Generic as the Service Type. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 32
Figure 5-49: Standard Options section 8. Expand the Standard Options section and select the following options: a) Deselect the Force L7 checkbox (if visible). b) Enter 448,5070-5073,5075,5076,5080 in the Extra Ports field and click the Set Extra Ports button. c) Deselect the Transparency checkbox. d) Select Normal Protocols in the Server Initiating Protocols drop-down menu. e) Select Source IP Address as the Persistence Mode. f) Select 20 Minutes as the Persistence Timeout. g) Select least connection as the Scheduling Method. h) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout. Figure 5-50: Real Servers section 9. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. 5.2.11 Configure Edge Virtual Services To configure the various Edge Virtual Services, refer to the sections below. When load balancing external interfaces of Edge pools, the shared interface IP should be used as the default gateway on all Edge interfaces. Also, a publicly routable IP with no NAT or port translation must be used. 5.2.11.1 Lync Edge External AV Media UDP Virtual Service To configure a Virtual Service for Lync Edge External AV Media UDP, follow the steps below: 1. Click the Add New button. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 33
Figure 5-51: Add New VS screen 2. Enter a Virtual Address. 3. Enter 3478 in the Port field. 4. Enter a recognisable Service Name, for example Lync Edge External AV Media UDP. 5. Select udp as the Protocol. 6. Click Add This Virtual Service. Figure 5-52: Standard Options section 7. Expand the Standard Options section and select the following options: a) Select Source IP Address as the Persistence Mode. b) Set the Timeout to 20 Minutes. c) Select least connection as the Scheduling Method. Figure 5-53: Real Servers section 8. Expand the Real Servers section. 9. Select ICMP Ping in the Real Server Check Parameters drop-down menu. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 34
5.2.11.2 Lync Edge External SIP Virtual Service To configure a Virtual Service for Lync Edge External SIP, follow the steps below: 1. Click the Add New button. Figure 5-54: Add New VS screen 2. Enter a Virtual Address. 3. Enter 443 in the Port field. 4. Enter a recognisable Service Name, for example Lync Edge External SIP. 5. Ensure that tcp is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-55: Standard Options section 7. Expand the Standard Options section and select the following options: a) Select the Force L7 checkbox. b) Deselect the Transparency checkbox. c) Select Source IP Address as the Persistence Mode. d) Select 20 Minutes as the Persistence Timeout. e) Select least connection as the Scheduling Method. f) Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout. Figure 5-56: Advanced Properties section Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 35
8. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the Real Server Check Parameters drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. 5.2.11.3 Lync Edge External SIP Federation Virtual Service To configure a Virtual Service for Lync Edge External SIP Federation, follow the steps below: 1. Click the Add New button. Figure 5-57: Add New VS screen 2. Enter a Virtual Address. 3. Enter 5061 in the Port field. 4. Enter a recognisable Service Name, for example Lync Edge External SIP Federation. 5. Ensure that tcp is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-58: Standard Options section 7. Expand the Standard Options section and select the following options: a) Select the Force L7 checkbox. b) Deselect the Transparency checkbox. c) Select Source IP Address as the Persistence Mode. d) Select 20 Minutes as the Persistence Timeout. e) Select least connection as the Scheduling Method. f) Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 36
Figure 5-59: Real Servers section 8. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the Real Server Check Parameters drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. 5.2.11.4 Lync Edge External XMPP Virtual Service To configure a Virtual Service for Lync Edge External XMPP, follow the steps below: 1. Click the Add New button. Figure 5-60: Add New VS screen 2. Enter a Virtual Address. 3. Enter 5269 in the Port field. 4. Enter a recognisable Service Name, for example Lync Edge External XMPP. 5. Ensure that tcp is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-61: Standard Options section 7. Expand the Standard Options section and select the following options: a) Select the Force L7 checkbox. b) Deselect the Transparency checkbox. c) Select Source IP Address as the Persistence Mode. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 37
d) Select 20 Minutes as the Persistence Timeout. e) Select least connection as the Scheduling Method. f) Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout. Figure 5-62: Real Servers section 8. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the Real Server Check Parameters drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. 5.2.11.5 Lync Edge External Conferencing Virtual Service To configure a Virtual Service for Lync Edge External Conferencing, follow the steps below: 1. Click the Add New button. Figure 5-635-64: Add New VS screen 2. Enter a Virtual Address. 3. Enter 443 in the Port field. 4. Enter a recognisable Service Name, for example Lync Edge External Conferencing. 5. Ensure that tcp is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-655-66: Standard Options section Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 38
7. Expand the Standard Options section and select the following options: a) Select the Force L7 checkbox. b) Deselect the Transparency checkbox. c) Select Source IP Address as the Persistence Mode. d) Select 20 Minutes as the Persistence Timeout. e) Select least connection as the Scheduling Method. f) Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout. Figure 5-675-68: Advanced Properties section 8. Expand the Advanced Properties section. 9. Enter https://%h%s in the Redirection URL field and click Add HTTP Redirector. Figure 5-695-70: Real Servers section 10. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the Real Server Check Parameters drop-down menu. b) Enter 443 in the Checked Port field and click Set Check Port. 5.2.11.6 Lync Edge External AV Media TCP Virtual Service To configure a Virtual Service for Lync Edge External AV, follow the steps below: 1. Click the Add New button. Figure 5-71: Add New VS screen 2. Enter a Virtual Address. 3. Enter 443 in the Port field. 4. Enter a recognisable Service Name, for example Lync Edge External AV Media TCP. 5. Ensure that tcp is set as the Protocol. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 39
6. Click Add This Virtual Service. Figure 5-72: Standard Options section 7. Expand the Standard Options section and select the following options: a) Select the Force L7 checkbox. b) Select the Transparency checkbox. c) Select Source IP Address as the Persistence Mode. d) Select 20 Minutes as the Persistence Timeout. e) Select least connection as the Scheduling Method. f) Enter 1800 in the Idle Connection Timeout and click Set Idle Timeout. Figure 5-73: Real Servers section 8. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the Real Server Check Parameters drop-down menu. b) Enter 443 in the Checked Port field and click Set Check Port. 5.3 Common to Both The Virtual Services listed below are common to both DNS and HLB configurations. 5.3.1 Lync Office Web App Servers Virtual Service To configure a Virtual Service for Office Web App Servers, follow the steps below: 1. Click the Add New button. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 40
Figure 5-745-75: Add New VS screen 2. Enter a Virtual Address. 3. Enter 443 in the Port field. 4. Enter a recognisable Service Name, for example Office Web App Servers. 5. Ensure that TCP is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-76: SSL Properties section 7. Expand the SSL Properties section and select the following options: a) Select the Enabled check box. b) Select the Reencrypt check box. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 41
Figure 5-77: Standard Options section 8. Expand the Standard Options section and select the following options: a) Select Super HTTP and Source IP as the Persistence Mode. b) Select 30 Minutes as the Persistence Timeout. c) Select least connection as the Scheduling Method. d) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout. Figure 5-785-79: Advanced Properties section 9. Expand the Advanced Properties section. 10. Enter https://%h%s in the Redirection URL field and click Add HTTP Redirector. Figure 5-805-81: Real Servers section Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 42
11. Expand the Real Servers section and select the following options: a) Select HTTPS Protocol in the drop-down menu. b) Enter /hosting/discovery in the URL field and click Set URL. c) Select the Use HTTP/1.1 checkbox. d) Select GET as the HTTP Method. 5.3.2 Lync Director Reverse Proxy HTTP Virtual Service To configure a Virtual Service for Lync Reverse Proxy HTTP, follow the steps below: 1. Click the Add New button. Figure 5-82: Add New VS screen 2. Enter a Virtual Address. 3. Enter 80 in the Port field. 4. Enter a recognisable Service Name, for example Lync Director Reverse Proxy HTTP. 5. Ensure that TCP is set as the Protocol. 6. Click Add This Virtual Service. Figure 5-83: Standard Options section 7. Expand the Standard Options section and select the following options: a) Select the Force L7 checkbox. b) Deselect the Transparency checkbox. c) Select Source IP Address as the Persistence Mode. d) Select 20 Minutes as the Persistence Timeout. e) Select least connection as the Scheduling Method. f) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 43
Figure 5-84: Real Servers section 8. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. 9. Click the Add New button to add a Real Server. Figure 5-85: Add Real Server 10. Enter the Real Server Address for the Director(s). 11. Enter 8080 as the port. Ensure to not use 80 as the Real Server Port. 12. Click the Add This Real Server button. 5.3.3 Lync Director Reverse Proxy HTTPS Virtual Service To configure a Virtual Service for Lync Reverse Proxy HTTPS, follow the steps below: 1. Click the Add New button. Figure 5-86: Add New VS screen 2. Enter a Virtual Address. 3. Enter 443 in the Port field. 4. Enter a recognisable Service Name, for example Lync Director Reverse Proxy HTTPS. 5. Ensure that TCP is set as the Protocol. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 44
6. Click Add This Virtual Service. 7. Expand the SSL Properties section. 8. Select the Enabled check box. 9. Click OK. 10. Select the Reencrypt checkbox. Figure 5-87: SSL Properties section Figure 5-88: Standard Options section 11. Expand the Standard Options section and select the following options: a) Select Source IP Address as the Persistence Mode. b) Select 20 Minutes as the Persistence Timeout. c) Select least connection as the Scheduling Method. d) Enter 1800 in the Idle Connection Timeout text box and click Set Idle Timeout. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 45
Figure 5-89: Real Servers section 12. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. 13. Click the Add New button to add a Real Server. Figure 5-90: Add a Real Server 14. Enter the Real Server Address for the Director(s). 15. Enter 4443 as the Port. Ensure to not use 443 as the Real Server Port. 16. Click the Add This Real Server button. 5.3.4 Lync Front End Reverse Proxy HTTP Virtual Service To configure a Virtual Service for Lync Reverse Proxy HTTP, follow the steps below: 1. Click the Add New button. Figure 5-91: Add New VS screen 2. Enter a Virtual Address. 3. Enter 80 in the Port field. 4. Enter a recognisable Service Name, for example Lync Front End Reverse Proxy HTTP. 5. Ensure that TCP is set as the Protocol. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 46
6. Click Add This Virtual Service. Figure 5-92: Standard Options section 7. Expand the Standard Options section and select the following options: a) Select the Force L7 checkbox. b) Deselect the Transparency checkbox. c) Select Source IP Address as the Persistence Mode. d) Select 20 Minutes as the Persistence Timeout. e) Enter 1800 in the Idle Connection Timeout field and click Set Idle Timeout. Figure 5-93: Real Servers section 8. Expand the Real Servers section and select the following options: a) Select TCP Connection Only in the drop-down menu. b) Enter 5061 in the Checked Port field and click Set Check Port. 9. Click the Add New button to add a Real Server. Figure 5-94: Add Real Server 10. Enter the Real Server Address for Front End Server(s). 11. Enter 8080 as the port. Copyright 2002-2016 KEMP Technologies, Inc. All Rights Reserved. 47