Jamvee™
Unified Communications
Microsoft® Lync™ Federation
Procedures for federating an Enterprise
Microsoft® Lync™ 2010,
Lync™ 2013 &
Lync™ Online via Office-365™ deployment
with the jamvee™ Unified Communications
Service.
9th Oct 2014
v4.1 -08
Table of Contents
Introduction ...............................................................................................................3
Access Methods .......................................................................................................4
2.1
Public Internet ............................................................................................................. 4
2.2
IP Transit Access with QoS (i.e. Public Internet access with QoS) ................................ 4
TCP/UDP Port configuration needed for federated Microsoft Lync connections ........5
Federation Checklist .................................................................................................6
Federation for Lync 2013 ..........................................................................................7
Federation for Lync 2010 ..........................................................................................9
Federation for Office365 Enterprise (E Plans) .........................................................11
Federation for Office365 Small Business (P Plans) .................................................14
More information on Federation ..............................................................................15
Technical Support ...................................................................................................15
Supported Lync Environments:
Lync 2013
Lync 2010
Lync Online via Office365
Supported Lync clients:
Lync 2013 Windows client
Lync 2010 Windows client
Lync 2010 Mac client
Native Lync on Polycom
v4.1-08-20141009
© 2014 Tata Communications Ltd. All rights reserved. Protected under the Berne Convention.
TATA COMMUNICATIONS and TATA are trademarks of Tata Sons Limited in certain countries.
2
Introduction
“Federation” is the process and technology that supports external communication and
collaboration via IM, Presence, Audio and Video including Content Sharing, with users outside
an organizations own domain. Microsoft® Lync™ “federation” enables external users in other
public and/or private Lync SIP network domains to collaborate with external users using the
Microsoft Lync client application.
An enterprise must deploy a Lync Edge Server outside the enterprise firewall so that signalling
(SIP) and media (Audio, Video, content sharing, IM, and presence) connections can be
established from within the internal enterprise Lync deployment to other external public and/or
private Lync deployments – including the jamvee™ service. The Lync Edge Servers deployed
in the perimeter of the Global Meeting Exchange™ network (i.e. the “Exchange”) where the
jamvee™ service is hosted control how users outside the Exchange network firewall can
connect to the jamvee™ internal Lync Server deployment and the unified conference bridge
within the Exchange infrastructure.
The following diagram illustrates a typical Lync federated deployment with the jamvee™
service over the public internet:
Figure 1: Microsoft® Lync™ federation with jamvee.com
The jamvee™ Exchange Lync Edge Servers are deployed with an “Open Lync Federation”
model so they can be auto-discovered. In most cases, if “Open Lync Federation” is also
configured on the enterprise Lync Edge Server, federated access should automatically occur
when a user creates their first session to jamvee.com. If that fails, then the instructions in this
document detail how to configure your systems to federate with jamvee.com.
v4.1-08-20141009
© 2014 Tata Communications Ltd. All rights reserved. Protected under the Berne Convention.
TATA COMMUNICATIONS and TATA are trademarks of Tata Sons Limited in certain countries.
3
Access Methods
It is possible to federate your Lync estate with the jamvee™ service, using a both dedicated
and public access methods. More detail on each access method is provided in the jamvee™
Customer Systems Administrator Guide, available from https://enterprise.jamvee.com/documentation.
The following sections describe 3 ways of connecting a Lync estate to the jamvee™ Exchange
network on which jamvee™ Unified Communications (UC) resides.
2.1
Public Internet
Jamvee™ supports a federated connection from an enterprise, or Lync 365 deployment, via the
Public Internet. This connection is also known as a Exchange Federated Access Trunk. A
Microsoft Lync Federation connection is the standard mechanism supported by Microsoft to
allow the interconnection of different Lync domains.
Access via the Public Internet provides the following benefits:
• Ease of Provisioning – this access method is the easiest way to get endpoints/clients running
Lync bridged into a jamvee™ conference since there are no physical transport links to
provision – however, the quality and performance is limited to “best effort” since it relies on
Public Internet connections and the quality for real-time communications of an Internet
connection can vary widely depending on many different network conditions including overall
latency and packet loss.
• Lowest Cost – this option is the lowest cost access method
This transport access method is ideal for those organizations who require federated Microsoft
Lync access to jamvee™ Unified Conferencing service, and accept the quality and reliability of
this access method, albeit poorer than direct connection access.
2.2
IP Transit Access with QoS (i.e. Public Internet access with QoS)
A global IP network backbone (IP Transit) is available that can be used to access the jamvee™
service using QoS tagging of jamvee™ data across the IP Transit network between the
customer’s local-loop access port on the nearest IP Transit router and the core Exchange
network where the jamvee™ service is hosted. This offers a higher-level of service for
transmitting real-time jamvee™ media form the customer premise to the jamvee™ service. The
customer local loop, i.e. the link from the customer perimeter Internet router to the nearest IP
Transit PoP) must be dedicated to jamvee™ access in order to maintain the higher quality
service.
v4.1-08-20141009
© 2014 Tata Communications Ltd. All rights reserved. Protected under the Berne Convention.
TATA COMMUNICATIONS and TATA are trademarks of Tata Sons Limited in certain countries.
4
This Access Method provides the following benefits:
• Broad Reach – a global Internet (IP) transport network with QoS capabilities
• Destination QoS – ability to provide a higher quality level of IP packet transport over Tata
Communications’ global IP backbone, resulting in a better overall quality of experience for a
unified conference call with real-time media traffic (video and voice) when compared to the
variability of standard Public Internet access.
• Standard Internet Addressing – utilizes standard Internet addressing for simplified
management and control
• Lower Cost – the IP Transit connection is a great intermediate solution as it is lower cost than
a full private MPLS connection and but significantly higher quality than a best effort, variable
Public Internet connection.
This access method will be of interest to enterprises who require a dedicated Internet transport
with QoS, but do not need the full capabilities of private MPLS access. This service offers better
quality that that delivered by other unified conferencing providers who have to rely solely on the
public Internet.
TCP/UDP Port configuration needed for federated Microsoft Lync
connections
Once you have provisioned and integrated the Lync Edge Server with the internal Lync
deployment, all the necessary firewall/proxy server settings are part of that architecture.
Provisioning and setting the federation architecture within the enterprise perimeter network
(DMZ) is the responsibility of the customer.
There is nothing additional that is required for federated Lync access to jamvee, other than
provisioning the Lync Edge Server to federate with the jamvee™ Unified Communications
service (if required).
Firewall Port Numbers
Jamvee Signalling & Media IP Addresses




New York: 64.86.68.0/23
Singapore:180.87.138.0/23
London: 195.219.126.0/23
Sydney: 180.87.117.0/24


Signalling Ports
TCP 5061
TCP 443

Media Ports
RTP (TCP & UDP) 50,000-59,999
v4.1-08-20141009
© 2014 Tata Communications Ltd. All rights reserved. Protected under the Berne Convention.
TATA COMMUNICATIONS and TATA are trademarks of Tata Sons Limited in certain countries.
5
Federation Checklist
 Enable Lync on your account
 Federate with the jamvee™ service…
If your Lync deployment is not configured as “Open Federation,”
you will need to add lyncfed.jamvee.com among your list of federated partners.
Note: for details about the different methods you can use to start the Lync Server
Control Panel, see Open Lync Server Administrative Tools.
 You must ensure that you have a publicly-issued certificate installed on your Edge
server.
 Ensure the enterprise firewall allows the following ports to/from the jamvee™ service:




New York: 64.86.68.0/23
Singapore:180.87.138.0/23
London: 195.219.126.0/23
Sydney: 180.87.117.0/24


Signalling Ports
TCP 5061
TCP 443

Media Ports
RTP (TCP & UDP) 50,000-59,999
Note: If possible these IP addresses should not appear in a NAT – as this can lead to
no audio, no video or one way communication
 Make sure to update the DNS SRV record for your Lync™ domain.
Note: Your edge server should resolve the jamvee™ lyncfed URL, by making a query
to the Public DNS service.
v4.1-08-20141009
© 2014 Tata Communications Ltd. All rights reserved. Protected under the Berne Convention.
TATA COMMUNICATIONS and TATA are trademarks of Tata Sons Limited in certain countries.
6
Federation for Lync 2013
To initiate federation between your Lync server 2013 and the jamvee™ service please follow these
steps:
1.
Login to the Lync Front End, or Standard Edition, Server and open the Lync Control
Panel by going to Start >> All Programs >> Microsoft Lync Server 2013 >> Lync Server
Control Panel
Note: for details about the different methods you can use to start the Lync Server Control
Panel, see Open Lync Server Administrative Tools.
Figure 2: Lync2013 - Access Lync Server Control Panel (in Windows 2013 Server)
2.
On the Lync Server Control Panel enable federation at a global level by going to:
Federation and External Access >> External Access Policy and seeing if Federated User
Access is checked. If not, enable Federated user access by clicking on Edit >> Show Details
and check Enable Communications with Federated users.
Figure 3: Lync2013 - External Access Policy
3.
To enable federation at a system level, select Access Edge Configuration from the top
navigation.
v4.1-08-20141009
© 2014 Tata Communications Ltd. All rights reserved. Protected under the Berne Convention.
TATA COMMUNICATIONS and TATA are trademarks of Tata Sons Limited in certain countries.
7
4.
Under Edit Access Edge Configuration: Select Enable federation and Enable partner
domain discovery.
Figure 4: Lync2013 - Access Edge Configuration
5.
Tedo add the jamvee™ federation domain, go to SIP Federated Domains from the top
navigation.
6.
Now add a new domain pointing to jamvee.com and edge server pointing to
lyncfed.jamvee.com (FQDN).
Figure 5: Lync2013 - Federated Domains
Note: this FQDN will always connect via GeoDNS to the closest Exchange Lync Edge Server
to the enterprise Edge Server to attempt to minimize latency between the end-user client and
the jamvee™ unified conference bridge.
v4.1-08-20141009
© 2014 Tata Communications Ltd. All rights reserved. Protected under the Berne Convention.
TATA COMMUNICATIONS and TATA are trademarks of Tata Sons Limited in certain countries.
8
Federation for Lync 2010
To initiate federation between your Lync server 2010 and the jamvee™ Unified
Communications service please follow these steps:
1. Login to the Lync Front End or Standard Edition Server and open the Lync Control Panel
by going to Start >> All Programs >> Microsoft Lync Server 2010 >> Lync Server
Control Panel
Figure 6: Lync2010 - Access Lync Server Control Panel
2. On the Lync server control panel enable federation at a global level by going to:
External User Access >> External Access Policy and seeing if Federated User Access
is checked. If not, enable Federated user access by clicking on Edit >> Show Details and
check Enable Communications with Federated users.
Figure 7: Lync2010 - External Access Policy
v4.1-08-20141009
© 2014 Tata Communications Ltd. All rights reserved. Protected under the Berne Convention.
TATA COMMUNICATIONS and TATA are trademarks of Tata Sons Limited in certain countries.
9
3. To enable federation at a system level, select Access Edge Configuration from the top
navigation.
4. Under Edit Access Edge Configuration: Select Enable federation and Enable partner
domain discovery.
Figure 8: Lync2010 - Access Edge Configuration
5. To add the jamvee™ Lync domain, go to Federated Domains from top navigation.
6. Now add a new domain pointing to jamvee.com and edge server pointing to
lync.jamvee.com FQDN.
Figure 9: Lync2010 - Federated Domains
v4.1-08-20141009
© 2014 Tata Communications Ltd. All rights reserved. Protected under the Berne Convention.
TATA COMMUNICATIONS and TATA are trademarks of Tata Sons Limited in certain countries.
10
Federation for Office365 Enterprise (E Plans)
To initiate federation between your Office365 Lync service and the jamvee™ service please complete
the following steps:
1.
Login to the Office365 portal as an Admin and access the Lync Settings by clicking on manage
under Lync settings.
Figure 10: Office365 (Enterprise) - Manage Lync Settings
2.
On the Lync Online Control Panel, ensure Domain federation is set to Enabled.
If it is Disabled, go to Domain Federation >> Edit and then enable federation by selecting
either:
Turn on external communications with all except blocked domains
(Open Federation)
or
Turn off external communications with all except allowed domains, in which case you
need to allow the jamvee™ domain for Lync federation
v4.1-08-20141009
© 2014 Tata Communications Ltd. All rights reserved. Protected under the Berne Convention.
TATA COMMUNICATIONS and TATA are trademarks of Tata Sons Limited in certain countries.
11
Figure 11: Office365 (Enterprise) - Domain Federation Mode
3.
If the option to Turn off external communications with all except allowed domains was
selected, add the jamvee™ Lync domain by clicking on add a domain and entering the
domain lync.jamvee.com.
Figure 12: Office365 (Enterprise) - Add a Domain
v4.1-08-20141009
© 2014 Tata Communications Ltd. All rights reserved. Protected under the Berne Convention.
TATA COMMUNICATIONS and TATA are trademarks of Tata Sons Limited in certain countries.
12
4.
Once enabled, the domain will show up as allowed on the Domain Federation tab.
Figure 43: Office365 (Enterprise) - External Communications: Adding a domain
Figure 13: Office365 (Enterprise) - External Communications: Adding a domain
5.
Ensure each user is setup for Lync Federation calls by going to Users >> Edit User
Settings, select a user and ensure the Lync Users in other organizations box is checked.
v4.1-08-20141009
© 2014 Tata Communications Ltd. All rights reserved. Protected under the Berne Convention.
TATA COMMUNICATIONS and TATA are trademarks of Tata Sons Limited in certain countries.
13
Federation for Office365 Small Business (P Plans)
Microsoft Office365 Small Business Plans (P1 or P2 Plan) are by default set to “Open Federation.”
To initiate federation between your Lync server 2010 and the jamvee™ Unified Communications follow
these steps:
1.
Login as an Admin to the Office365 online portal and click on General Settings under
Lync.
Figure 14: Office365 (Enterprise) – External Communications: Lync users in other organizations is checked
Figure 15: Office365 (Small Business) - General Settings
v4.1-08-20141009
© 2014 Tata Communications Ltd. All rights reserved. Protected under the Berne Convention.
TATA COMMUNICATIONS and TATA are trademarks of Tata Sons Limited in certain countries.
14
2.
Ensure External Communications is set to Enabled on the Lync Online Control Panel.
Figure 16: Office365 (Small Business) - Enabling External Communications
More information on Federation
Microsoft Lync Federation Guides:
Lync 2013: http://technet.microsoft.com/en-us/library/gg425908.aspx
Lync 2010: http://technet.microsoft.com/en-us/library/gg425908(v=ocs.14).aspx
Open Lync Server Administrative Tools: http://technet.microsoft.com/en-us/library/gg195741.aspx
Technical Support
You can reach us at [email protected] with any questions you have about federation with
the jamvee™ Unified Communications service.
Sales Contact:
v4.1-08-20141009
© 2014 Tata Communications Ltd. All rights reserved. Protected under the Berne Convention.
TATA COMMUNICATIONS and TATA are trademarks of Tata Sons Limited in certain countries.
15