Thursday, November 22, 2012

Lync with Cisco VCS Integration/HD Integration

Most of the organisation wil be having High defnition conference feature available.So the users who are using Lync they can utilise that feature using Lync client easily with below steps.The document is svailable on Cisco sites but still below one will be an easy refernce for you.

First you need to add VCS domain as truted application in Lync topology then only Lync will accept request from VCS.

Here is command to make VCS as trusted application:
1- Add application pool
New-CsTrustedApplicationPool -Identity <vcsdomainfqdn> -Registrar LyncFEPool -site <Sitenumber you want to integrate> -RequiresReplication $false -ThrottleAsServer $true -TreatAsAuthenticated $true

2- Add application
New-CsTrustedApplication -ApplicationID VCSApplication1 -TrustedApplicationPoolFqdn <vcsdomainfqdn> -Port 5061
3- Set The encryption Level.
set-CsMediaConfiguration -EncryptionLevel supportencryption
4- Create static route to route the request towards VCS.
$Route1=New-CsStaticRoute -TLSRoute -Destination "vcsdomainfqdn" -MatchUri "domainname" –Port 5061 -UseDefaultCertificate $true
Set-CsStaticRoutingConfiguration -Identity global -Route @{Add=$Route1}

Above part is from Lync side.Same way need to configure Cisco VCS to accept lync request.
Once both side configured you can dial conference number from Lync and enjoy the conference from your Desk.
 

Wednesday, November 21, 2012

Port Requirements for Lync 2010 Application sharing with external user

For Small buisness network this topic may not be that much usefull,but for a Large enterprise with restricted network setup this will be very usefull.Below requirements i captured using lot of testing and network tracing.When i recieved this requirement there was no articles clearly mentioned about how we can achieve this,all was mentioned some specific ports for application wise.

Scenario:Users are sitting in a restricted network.User only have text IM access with othere users as well as federation/external users.Requirement here is to application sharing with external/federated users.After the study i concluded with below ports for application sharing with external users.

Public to edgeserver:

TCP/443

UDP/3478

TCP/8057

TCP/50,000-59,999 (Outbound only)
From the internal Client to the internal Edge:

TCP - 443
UDP – 3478
Above ports for only to conference and Media traffic from internal user to External user.
If you wanted to have internal conference between 2 restricted netwok users below is the port requirements.
Client to Front End Pool
UDP
49152 to 57500
TCP
8057
TCP
443
TCP
49152 to 65535
TCP
448
Client to AV Pool
UDP
49152 to 57500
UDP
57501 to 65535
 

Monday, November 12, 2012

Lync 2010 User provisioning using AD Attributes

When it comes to Large setup you may need to provision users using some thirdparty tools or any other scripts.Here i faced major challenge like tried with dfault attributes but it was not success.User was showing not enabled for Lync access.

Below is the attributes i enabled initially.

sRTCSIP-PrimaryUserAddress:
msRTCSIP-UserEnabled: TRUE
msRTCSIP-PrimaryHomeServer:
msRTCSIP-FederationEnabled: TRUE
msRTCSIP-InternetAccessEnabled: TRUE
msRTCSIP-OptionFlags: 257

But it failed to enable users in Lync.Finally after lot of try i got solution like i need to enable default user policy also.below is the attribute which we need to enable.

msRTCSIP-UserPolicies:

Hope this will help you to enable using AD attributes or using FIM or any other provisioning tools.

Set Media Port Ranges in Lync

Here i am explaining this mainly for Enabing QoS for Lync services.If your organization is with large network this is necessary to limit lync Media traffic into a defined port ranges.SO this QoS can be enabled inall network appliances and assign the bandwidth from the network level.
Below is the commands to set the mediaports in Lync 2010

Client Ranges

Set-CsConferencingConfiguration -ClientMediaPortRangeEnabled 1
Set-CsConferencingConfiguration -ClientAudioPort 20000 -ClientAudioPortRange 40 -ClientVideoPort 20040 -ClientVideoPortRange 40 -ClientAppSharingPort 20080 -ClientAppSharingPortRange 40 -ClientFileTransferPort 20120 -ClientFileTransferPortRange 40 -ClientMediaPort 20160 -ClientMediaPortRange 40

Lync Pools

Set-CsConferenceServer -Identity <PoolFQDN> -AppSharingPortStart 40803 -AppSharingPortCount 8348

Set-CsApplicationServer -Identity <PoolFQDN> -AppSharingPortStart 40803 -AppSharingPortCount 8348

 
 

Thursday, November 8, 2012

SQL Server Cannot open user default database Login Failed

As a Lync support person you might need to handle some SQL issues. Most of the cases you want to move database here and there because of the disk space issue or for proper allocation of disk. Here i faced a challenge while doing LCSLOG database movement from one disk to another Disk.

I have detached the database and copy the database in another disk after that i was not able to login to SQL management studio. I was getting "Cannot open user default database.Login Failed error".

I thought my SQL got corrupted ,After lot of search i got the solution like below.

Open SQL Managemnet Studio
Select options tab

Now change the connect to database to master or any available database on your setup

 
Now click on connect and it will successfully log you in. Once you login in the system run following statement for your username and it should fix your problem. Make sure to replace [test] with your username and master with yourdatabase name.

ALTER LOGIN [username] WITH DEFAULT_DATABASE = master
GO

 

 

Thursday, November 1, 2012

Intermittent AOL PIC issue in Lync

Initially when we configured Lync fo Public IM communication we have recieved lot of omplaints from users related IM failed when the communicate with AOL users.After Lot of touble shooting found one solution and it helped me to resolve our issue.

In order to resolve this, you need to change the Cipher Suite order used by Windows such that TLS RSA with RC4 128 MD5 is tried first.
In order to change the Cipher Suite order, do the following on your Access Edge server:
  1. Launch the Group Policy Object Editor using: Start --> Run -> gpedit.msc
  2. Within the Group Policy Object Editor, traverse down to; Computer Configuration --> Administrative Templates --> Network --> SSL Configuration
  3. Click on SSL Configuration, and then double-click on SSL Cipher Suite Order (by default, the SSL Cipher Suite Order is set to "Not Configured")
  4. Select the “Enabled” radio button, and in the in the SSL Cipher Suites text box, copy the entire string into Notepad.
  5. Find  TLS_RSA_WITH_RC4_128_MD5, in the list and cut and paste it to the first item in the list.  (Be sure to take the trailing comma with it so you don't end up with a ",," in the list)
  6. Paste the newly-formatted string back into the text field in the GPO Editor, click OK
  7. Restart (reboot) the Lync Access Edge server for these changes to take effect.
Thanks for below Link.
http://blogs.technet.com/b/messaging_with_communications/archive/2011/09/27/lync-and-aol-pic-issues.aspx