Răspuns External Issue

  • 2 พฤษภาคม 2555 4:59
     
     

    Trying to get my organization mobile phones to work externally (iPhones, Andriod, WP7).  All devices work fantastic on corp wifi, but when switching to 3g or another wifi network all contacts are unknown status.

    When I go to https://lyncdiscover.domain.com it spits out a file showing the inside web services url.

    Get-CsMCXconfiguration |fl shows ExposedWebUrl is set to External.

    I do not have a TMG Edge Router, I use pfsense using 1:1 nat with all required ports open. So I don't think I can reverse proxy.

    I have been to https://www.testocsconnectivity.com/ and the mobile test works fine.

    Also my DNS is as follows:

    External DNS:

    lyncdiscover.domain.com pointing to Public IP address of NAT'd FE
    im.domain.com pointing to Public IP address of NAT'd FE (web service url)
         Same Public IP's

    imedge.domain.com to Public IP of NAT'd Edge Server

    Internal DNS

    lyncdiscoverinternal.domain.local to local IP of FE
    web1.domain.local to local IP of FE
         Same Local IP's

    imedge.domain.local Local IP (10.x.x.x) and Different Subnet IP (192.x.x.x) of Edge

    All Edge services are working fine with Desktops.

    I'm plain out of resolve after searching the net and the forums heavily.  Any help would be appreciated.


ตอบทั้งหมด

  • 2 พฤษภาคม 2555 5:35
     
     คำตอบ
    You have to publish External URLs for Lync through a Reverse Proxy because you must forward ports 80/443 to ports 8080/4443.
    You cannot use NAT to publish Lync webservices directly on the internet that will simply not work

    - Belgian Unified Communications Community : http://www.pro-lync.be -

  • 2 พฤษภาคม 2555 6:26
     
     
    Any help on setting up a reverse proxy on PF Sense?
  • 3 พฤษภาคม 2555 7:15
     
     

    Publishing rule through a Reverse proxy should be very easy. It is just the same as publishing a web server with the exception of the port redirection to 8080/4443


    - Belgian Unified Communications Community : http://www.pro-lync.be -

  • 5 พฤษภาคม 2555 16:14
     
     คำตอบ
    Check http://www.howexchangeworks.com/2012/05/lync-2010-mobility-service-deployment-part-2.html for reverse proxy settings.

    Rajith Enchiparambil | http://www.howexchangeworks.com |

    HowExchangeWorks.Com

  • 6 พฤษภาคม 2555 2:34
     
     คำตอบ

    In Case if you cannot do a TMG Rev Proxy, We would expect your NAT firewall to do Port redirection from 443 to port 4443.

    Lync Mobile Client -> Port 443 -> NAT Firewall -> Port 4443 -> Lync Server External Website

    I believe your NAT firewall is as of now routing traffic to the Lync Internal website and which is not supposed to be the case. All connections must hit the Lync External Website. Lync Internal website runs on port 443 while external runs on port 4443. Try to enable IIS logs on both websites and see to which Website the Requests are coming through now.

  • 6 กรกฎาคม 2555 11:02
     
     

    Hi Penberthy

    Have you treid Proxy Server with mod_security Package on Pfsense! this is a reverse proxy that acts like the one on TMG.. however, the only part which i'm not sure about is the certificates and the port forwarding if in case existed or not in this package.

    I'm planning to deploy Lync on Pfsense and i'll check whether this would work or not.

    cheers


    Mohammed JH