UNC220 Deploying Lync Server 2010 as a primary telephony solution

2. UNC220Deploying Lync Server 2010 as a primary telephony solution Dee Chury Phillip Priestley Global Solution Architect – UC Technical Consultant – UC Dell IT Consulting Dell IT Consulting

3. Agenda • Overview of the customer • Reasons why Lync Server 2010 was chosen • Architecture overview • Conceptual • Logical • Physical • Early adopter experiences & points to note

4. Introduction to Dell UC Solutions Dell provides a single point of contact, for an end-to-end UC solution Simple Core Messaging Core Unified Comms Unified Messaging Enables voicemail, email and fax to be sent to inbox. Anywhere access to inbox Enterprise grade messaging. Base foundation for Exchange Server 2010 UM Base module that provides enterprise grade presence, IM, wen conferencing and group chat. Base foundation for Enterprise Voice Core Infrastructure Flexible Practical Enterprise Voice AV Conferencing Building upon Core UC to provide multi party voice and video conferencing using webcams and conferencing devices • Integrating Core UC with existing PBX infrastructure by adding VoIP features through the use of a soft phone on the data network Dell UC solutions incorporate standard based technology Dell has a modular approach to UC integration

5. Building Schools of the Future Overview • BSF launched in 2004 by then UK Prime Minister - Tony Blair • Aim of BSF programme was to rebuild or refurbish every secondary school in England over a 20 year period • Programme was cancelled in July 2010 by which point 185 schools had received BSF investment • Dell and our consortium partners have 12 schools across 2 local authorities which are opening between 2010-2012 • Amongst ICT requirements, each new school requires a telephony platform in order to operate

6. Selection of Microsoft UC Voice Requirements Considered solutions Traditional IPT solution Only addressed core voice requirements Tied to network hardware High cost Microsoft Unified Communications Met (and exceeded) all communication and collaboration requirements, not just voice Tightly integrated experience Freed up budget for other front of class curriculum solutions • Core voice requirements • Typical telephony features • Flexible end-point deployment • Other ICT requirements included • Video conferencing • Web conferencing • Application sharing • Instant messaging • Budget apportionment

7. Conceptual Architecture • First phase of 6 schools needs to cater for over 5,600 users with a high-level of concurrency during core school hours. • Possible expansion to over 25,000 users through extended services. • All UC users provisioned from local school MIS to central AD via SIF and IdAM infrastructure. • Branch site resilience implemented. UC clients failover to central UC pool in the event of local UC server outage. • Extensive remote usage of UC is expected during non-core hours. Central Datacentre Messaging Service UM Service UC Monitoring & Archiving Compliance Services UC Mediation PSTN AD IdAM Zone Integration Server Systems Mgmt UC Enterprise Pool Net Load Balancing UC Edge Service Inet PSTN PSTN PSTN PSTN PSTN PSTN School A School B School C School D School E School F School MIS UC Server School MIS School MIS School MIS UC Server School MIS UC Server School MIS UC Server UC Server UC Server Users: 1,204 PCs: 568 Phones: 55 Users: 162 PCs: 102 Phones: 25 Users: 1,106 PCs: 537 Phones: 55 Users: 952 PCs: 724 Phones: 55 Users: 1,130 PCs: 739 Phones: 55 Users: 1,064 PCs: 494 Phones: 55

8. Logical Architecture Central Datacentre Lync Edge Server Remote user primary SIP registrar Remote user backup SIP registrar Backup SIP registrar Primary SIP registrar DMZ Internet HLB HLB Lync Edge Server Remote Lync User TMG Array School A MPLS Firewall TMG DSL Lync Users HLB Lync Standard Ed Server AD Lync Director Server Lync Director Server Voice GW Internal Network E1 Lync Monitoring & Archiving Servers Lync Server Enterprise Pool PSTN School B TMG Compliance Servers Lync Users SQL Cluster Lync Mediation Server Lync Standard Ed Server Voice GW External Phone

9. Physical Architecture • School UC Solution • Server = Dell PE R610 • Central Infrastructure Services • SAN / Hyper-V farm supporting AD, PKI, FIM, file servers, SCOM, etc. • Lync Server utilizing shared general purpose SQL cluster • Central UC Solution • Servers = Dell PE R610 • Exchange utilizing high-density SATA (48 x 2TB drives in 4U) • HLBs = Loadbalancer.org • Compliance Servers = FaceTime Vantage Dialogic DMG2000 Lync Server Std Ed & Mediation Server TMG Array Exchange Edge Servers Lync Edge Servers Hyper-V Farm Lync Mediation Server Lync Monitoring & Archiving Server SQL Server HA Cluster Exchange Unified Messaging Servers Lync Director Servers Lync Front End Servers Exchange Multi-Role Servers EqualLogic PS6000X iSCSI SAN Compliance Servers EqualLogic PS6500E iSCSI SAN Hardware Load Balancers

10. Compliance Policies Ethical walls provide the necessary control for ‘duty of care’ requirements Communication between selected Senior Students will be allowed on a case by case basis. *

11. Billing Solution • The Lync Server Monitoring and Archiving role can provide call duration information • However, it doesn’t natively provide billing information that users can use to apportion call charges to different parties • Dell built a billing engine upon SQL Reporting Services to provide user friendly billing information

12. Deploying Lync 2010 Phone Edition Devices • All teachers were issued with Jabra GN2000 headsets • Deployed Lync Phone Edition handsets (Aastra 6725ip) to school leadership team, admin staff, and a subset of teachers • Also deployed Lync Phone Edition handsets (Aastra 6721ip) as common area phones around the school • Lync Server provides a Device Update Service – used to automatically update firmware on the Phone Edition handsets • Desktop tethering vs. PIN sign-in • PIN sign-in issue and resolution: • DHCP Helper on network switch must support Option 43. Even if it does, make sure you test it. • Potential workaround: Create a dedicated VLAN for Phone Edition devices. Add a Microsoft DHCP Relay Agent to the VLAN as this does work. Common Area Phones Aastra 6721ip Personal Phones Aastra 6725ip

13. Certificate SAN Capacity Considerations • Subject Alternative Name (SAN) field in a standard X.509 certificate is limited to 1024 characters • Certificates with an extended SAN field can be purchased from commercial Certificate Authorities such as GoDaddy • Impact of having different SIP and email addresses, e.g. Exchange UM pick-up limitations on Lync 2010

14. Proxy and Firewall Issues • Be conscious of all the URLs needed by both Lync and Exchange • Ensure any web proxies in place on the network do not block or rewrite these URLs • Routing UM traffic through TMG • Symptom: External users could not leave voicemail messages as calls would be dropped after 5 seconds • TMG determined the media streams were DoS attacks and blocked them • Fix: Create rule to specifically allow media port range 1024 through 65,535 between Mediation Server and UM Server • Note: Creating a rule to allow all does not work

15. Important Lessons Learnt • Ensure you choose UC Optimised headsets • Become best friends with Snooper, Wireshark and other network analysis tools – you will need them… • Don’t assume anything with regards to network configuration, e.g. firewalls, DHCP relay agents – Test Lync thoroughly on the live network before going live • Don’t neglect end-user training - To get the maximum out of Lync requires a mind set change

16. © 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. Session Evaluations Tell us what you think, and you could win! All evaluations submitted are automatically entered into a daily prize draw*  Sign-in to the Schedule Builder at http://europe.msteched.com/topic/list/ * Details of prize draw rules can be obtained from the Information Desk.

18. © 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.