locked
Skype for Business with Multiple Sip Domains RRS feed

  • Question

  • We have a Skype for Business environment that currently is running multiple SIP domains. We have external DNS records that point to the records for the main SIP domain. We have no issues with users signing in and using the majority of the features. However there seem to be issues with the additional sip domains and federation. They can federate to other on Prem Skype for Business and Lync environments no problem. The main SIP domain can connect to regular skype users. However the additional SIP domains do not federate with Skype. They also seem to have an issue with connecting to O365. Has anyone seen this issue before?
    Wednesday, April 4, 2018 3:27 PM

All replies

  • Hi meka,

    If you have multiple SIP domains, you need a DNS SRV record for each domain. This SRV record supports federation and public IM connectivity. For each supported SIP domain in your organization, an external DNS A record for sip. <domain> that points to the external interface of the Access Edge Server and resolves to the external IP address on the firewall. If you have multiple SIP domains, you need a DNS A record for each. If a client cannot perform an SRV record lookup to connect to the Access Edge server, it uses this A record as a fallback.

    For example,
    You have two sip domains “domain1.com” and “domain2.com”, then you need to create the following DNS records.
    A record:
    Sip.domain1.com
    Sip.domain2.com
    SRV record:
    _sipfederationtls._tcp.domain1.com ==> sip.domain1.com port 5061
    _sipfederationtls._tcp.domain2.com ==> sip.domain2.com port 5061
     
    As for the certificate on Edge external interface, you should have both “sip.domain1.com” and “sip.domain2.com” as SAN entries in the certificate.
    For example,
    CN - Sip.domain1.com
    SAN - Sip.domain1.com
    SAN - Webconf.domain1.com
    SAN - Sip.domain2.com


    Best Regards,
    Alice Wang


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    • Proposed as answer by Alice-Wang Monday, April 9, 2018 9:44 AM
    Thursday, April 5, 2018 6:27 AM
  • Are there any update about this issue?

    Best Regards,
    Alice Wang


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    • Proposed as answer by Alice-Wang Tuesday, April 17, 2018 10:33 AM
    Monday, April 16, 2018 9:44 AM
  • if the reply is helpful to you, please mark it as an answer.

    Best Regards,
    Alice Wang


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    • Proposed as answer by Alice-Wang Wednesday, April 25, 2018 9:17 AM
    Wednesday, April 25, 2018 9:16 AM
  • This is all in place. We made sure the correct ports were also on the edge server. We did a service restart to see if it would resolve it. We checked to make sure the DNS records were pointed to the correct location. Still federation with O365 doesn't work and Skype and Skype for business federation still doesn't work. I have confirmed that the federated providers section in the edge is set up. We also changed out our external certificates to include the sub domains and still no luckl
    Thursday, May 3, 2018 3:45 PM
  • Do you have a hybrid configured between Skype for Business Server 2015 & Skype for Business Online.

    If so, have these additional domains been added into Office 365?

    Thursday, May 3, 2018 6:39 PM
  • Hi

    What does the output of Get-CsExternalAccesspolicy say? Also is the public federated provider configured Get-CsPublicProvider and also Get-CsHostedProvider 

    If not you need to configure this

    Kind Regards

    Tarim

    Friday, October 26, 2018 7:20 AM