locked
Mobility Setup for Skype for Business 2019... RRS feed

  • Question

  • Dear all,

    I'm trying to enable mobility on a newly installed SfB 2019 for a couple of weeks now and it seems like an impossible task :-(

    I built my FE server, and my Edge Server and remote connectivity works fine with Windows Clients.

    I tried many DNS record recommendations from everywhere so I don't think thats the problem.

    I believe the problem is my proxies as I figured no matter the mobile device is in internal Network or in an External one it needs a reverse proxy for connection.

    So a couple of questions:

    1- Do I need ADFS and ADFS Proxy for mobility? We don't have any partners and a single sip domain!

    2- can I use the remote access Web App Proxy as a reverse proxy?

    3- Can I use IIS ARR as a reverse proxy? What URLs should I forward? Any tips or tricks?

    4- My proxy will be in my DMZ and just has a single NIC and I don't think that causes any problems but if you suggest any alternatives I'm all ears.

    5- I used a wildcard cert everywhere and so far I haven't received a cert error in any captures or logs. Does it cause any problems for mobility.

    Wednesday, February 20, 2019 7:48 AM

All replies

  • Hi, 

     

    To use mobility feature in SFB, as you said you will have the Reverse Proxy deployed in your environment first. Please refer to the below link for the supported reverse proxy for Skype for Business:

    https://docs.microsoft.com/en-us/skypeforbusiness/certification/infra-rev-proxy

     

    If you are Using IIS ARR as a Reverse Proxy, please refer to the following article:

    https://blogs.technet.microsoft.com/nexthop/2013/02/19/using-iis-arr-as-a-reverse-proxy-for-lync-server-2013/

    Please refer to the guide from the Reverse Proxy provider that would provide. Here is the official article introduces how to set up reverse proxy servers for SFB Server.


    During the deployment process, you will need to configure DNS records to point to the public IP address of reverse proxy for reference: https://technet.microsoft.com/en-us/library/jj204781(v=ocs.15).aspx

    And as to the certificate requirement, please set external web service URL as certificate SN, and SAN need to have external web service FQDN and also all your lyncdisocver, meet and dial in URL (for all different sip domain that you have).

    Note: Wildcard SAN entry is supported for Simple URL (meet and dialin) publishing certificate when used for Reverse Proxy, but wildcard certificate cannot be used for Edge server, for more detailed support scope, please find here https://docs.microsoft.com/en-us/lyncserver/lync-server-2013-wildcard-certificate-support

     

    For firewall configuration, all traffic will be https 443 and 80, then will need to be redirected to 4443 and 8080 to the Lync front end. please refer to following link for Ports summary  https://technet.microsoft.com/en-us/library/jj204932(v=ocs.15).aspx

    Kind regards,

    Calvin Liu


    Please remember to mark the reply as an answer if you find it is helpful. It will assist others who has similar issue. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    • Proposed as answer by Calvin-Liu Monday, February 25, 2019 11:05 AM
    Thursday, February 21, 2019 6:48 AM
  • Hi,

     

    Are there any update for this issue? If the reply is helpful to you, please try to mark it as an answer, this will make answer searching in the forum easier and be beneficial to other community members as well. :)

    Kind regards, 

    Calvin Liu


    Please remember to mark the reply as an answer if you find it is helpful. It will assist others who has similar issue. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Click here to learn more. Visit the dedicated forum to shareexplore and talk to experts about Microsoft Teams.


    Thursday, February 28, 2019 9:42 AM
  • Hi,

    Just checking if the reply is helpful with you? Please try to mark the reply as an answer if is useful as it will assist other users who have similar issues to find answer more efficiently in out community.

    Please feel free to let us know if you need any further help. 

    Kind regards, 

    Calvin Liu


    Please remember to mark the reply as an answer if you find it is helpful. It will assist others who has similar issue. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Click here to learn more. Visit the dedicated forum to shareexplore and talk to experts about Microsoft Teams.


    Thursday, March 7, 2019 2:00 PM