Lync 2013 – Adding QOS to Lync Servers, Lync Clients and Lync Phone Editions

Quote

Evening all

Not so much a black art to enable QOS for Lync 2013, but out on the internet there is to be honest alot of rubbish how NOT to do it.

In this blog post is the correct way to implement QOS for Lync 2013.

All in all its not a difficult job to undertake but you do have to make sure all your ports are correct it simply wont work.

Like many other blog post i will break this down into step by step instructions as a guide to help you along your way.

Information you might find useful can be found here from Microsoft. Personally i think this is more of a hinderance than a help.QoS on Lync 2013

ok lets start with basics which are needed for QOS.

PORT RANGES

Before starting you need to decide on the port ranges you are going to deploy as part of the QOS settings. Whatever you decide ensure these ports arent being used by other areas within your business.

For this blog, im going to use the standard port which are documented by Microsoft.Also as part of this blog guide i will also use the recommended DSCP setting again by Microsoft.

Media Type Classification
Queuing and Dropping Notes
Audio EF (DSCP 46) Priority Queue Low loss, low latency, low jitter, assured bandwidth (BW)
Video AF41 (DSCP 34) BW Queue + DSCP WRED Pair with WAN Bandwidth Policies on constrained links
SIP Signalling CS3 (DSCP 24) BW Queue Class 4. Low drop priority

Its also worth noting that whatever DSCP classification you choose needs to be mirrored on your core network and switches.

Scenario Starting port Ending port
Client audio 20000 20199
Client video 20200 20399
Client application sharing 20400 20599
Client File Transfer 20600 20799
Client Media 20800 20999
Server application sharing 40800 41000
Server audio 49000 55000
Server video 57000 60000

Now onto Step 2

Lync 2013 Powershell to add the Port ranges. This is whats known in the Lync world as Inband Provisioning.

Im going to add these items piecemeal into the sections relevant to lync, starting with the Lync Server estate

For me this will be my Lync Standard Edition. However for you, you need to add this to each of your Lync Servers (FE’s, Director’s, Etc)

For the Lync Pool enter the following powershell command within the Lync Management Shell.

Set-CsConferenceServer -Identity lyncse2.northernlync.local -AppSharingPortStart 40800 -AppSharingPortCount 200

Set-CsConferenceServer -Identity lyncse2.northernlync.local -AudioPortStart 49000 -AudioPortCount 6000

Set-CsConferenceServer -Identity lyncse2.northernlync.local -VideoPortStart 57000 -VideoPortCount 3000

——————- Now for the Application Servers————————-

Set-CsApplicationServer -Identity lyncse2.northernlync.local -AppSharingPortStart 40800 -AppSharingPortCount 200

Set-CsApplicationServer -Identity lyncse2.northernlync.local -AudioPortStart 49000 -AudioPortCount 6000

Set-CsApplicationServer -Identity lyncse2.northernlync.local -VideoPortStart 57000 -VideoPortCount 3000

NOTE: Change the -identity to the Pool name of your server

Next the powershell commands are for the Lync Client to communicate using QOS using GPO (ensure you add the same GPO port ranges to each Lync client machine)

Set-CsConferencingConfiguration -ClientAudioPort 20000 -ClientAudioPortRange 199 -ClientVideoPort 20200 -ClientVideoPortRange 199 -ClientAppSharingPort 20400 -ClientAppSharingPortRange 199 -ClientFileTransferPort 20600 -ClientFileTransferPortRange 199 -ClientMediaPort 20800 -ClientMediaPortRange 199

then again enable it via powershell

Set-CsConferencingConfiguration -ClientMediaPortRangeEnabled $True

and last up now for the in band provision for the Lync Phone Edition

Set-CsUCPhoneConfiguration -identity global -VoiceDiffServTag 46

STEP 3 – Adding group polices onto the Windows Machines and the Lync Servers

this is a simple but time consuming piece (And take note, ensure you get it correct as it will stop QOS from working if there is an error)

Lync Server GP First (Also ensure if your running separate Mediation and SBA gateways you will also need to ensure you add the GP’s onto them)

Audio & Video entries for the Lync Servers inc mediation, SBA’s using GPO on the servers

Audio: DSCP 46 for all applications on source TCP/UDP ports 49000:55000

Video: DSCP 34 for all applications on source TCP/UDP ports 57000:60000

For Edge Servers (if applicable), again using GPO

Client audio:   DSCP 46 for MediaRelaySvc.exe on destination TCP/UDP ports 20000:20199

Client video:  DSCP 34 for MediaRelaySvc.exe on destination TCP/UDP ports 20200:20399

Server audio:  DSCP 46 for MediaRelaySvc.exe on destination TCP/UDP ports 49000:55000

Server video: DSCP 34 for MediaRelaySvc.exe on destination TCP/UDP ports 57000:60000

Audio & Video Entries for the Windows client. Pass this information onto your network/deployment team to push the GPO out to all the windows clients

Audio: DSCP 46 for lync.exe on source TCP/UDP ports 20000:20199

Video: DSCP 34 for lync.exe on source TCP/UDP ports 20200:20399

Complete

– I would now recommend running wireshark from the Windows machines running Lync 2013, and also all the Lync Servers to ensure the packets are being marked. Also once you’ve confirmed this is working, do a audio call (peer to peer) and check QOS from both ends to ensure the core switches/routers are allowing the QOS markings and not dropping them on-route. Then do a Audio/Video call and so on until you’ve checked scenarios are working with QOS.

So at the end to summarise, you should have the following

Running Get-CSService -ApplicationServer & Get-CSService -ConferencingServer  will tell you the configured ports on the servers. Now on each of your Lync servers, these ranges need to match what you entered into the GPO setting on the servers.

— Lync Clients

Running get-CSConferencingConfiguration will tell you the port ranges the Lync Clients need to communicate on. Now ensure each Lync Client Machines GPO matches the port range details from the get-CS command.

Thanks Iain Smith

Advertisements

Lync 2013 – Sennheiser Presence UC Full Review

Quote

Evening All

On the 1st August we will see the introduction of the Sennheiser UC Presence bluetooth device. Although ive had a beta version of this product since March, two weeks ago Sennheiser sent me a official rtm version of the headset. On face value there seems to be nothing cosmetically different from the previous version i was using, however for those reading my previous ‘bluetooth headset’ review i stated that i found the headset perfect and clear on audio but found the device awkward to wear for long periods of time. With this in mind when i received the new rtm version i was keen to retry and test the new device.

The first thing which was different from the beta i got was that within the box there was numerous ear pieces and ear loops of different sizes. once I got settled on the one that fitted my ear and ear cannel i set about giving the device a run through it paces. Below is the results and synopsis of my findings.

Audio Quality

As stated in the other blog post the audio from this device and in truth all optimised Sennheiser devices for Lync the audio is exceptional. I think this is due to the digital mics within the headset which other vendors bluetooth options dont have.

I have the UC Presence linked up with Lync and with my mobile phone and from both items the audio is excellent.

Headset Comfort Factor

With the correct ear pieces in place i have worn and used the UC Presence for the last 2 weeks full time with making an asserted effort to keep it on my ear even when im not expecting a call. I have to say it became second nature and felt natural and comfortable. If you purchase one of these headsets when they become available be sure that you test each ear and loop piece options correctly.

Battery life

On full charge the battery life states 10 hours of talk time. I usually spend a couple of hours a day minimum on calls each day, and last week in 5 days i put the device on charge on the friday morning for 30 minutes and at this moment its still going without the need for charging.

Bluetooth Connection Distance

The literature stats 25mtrs from the mini bluetooth usb dongle, which in this day and age i think is enough but that said the latest Jabra Motion has a 125mtr range so you would think a 100mtr difference is massive so i did a litmus test against both devices on the distance.

My findings were that the Sennheiser was getting a distance around 22mtrs away then the voice was dropping its audio. whereas the Jabra Motions alleged 125mtrs is massively over stated in my test. I found that at best on the two tests i did, the motion got to 33mtrs away but the audio became ‘blocky’ and distorted at 27mtrs. (its worth noting that my tests were carried out within a business organisation).

Synopsis

The UC Presence is a really well made device, with audio which hands down beats the rest of the field in my opinion. At the time of writing im unsure of the exact price point but i would expect around £149rrp. If i was asked by my clients which bluetooth device i would recommend the UC Presence right up there at the top of my list. If there was any negativity from me it would be i do like the auto answer option that is available on the other vendors bluetooth device which the Sennheiser UC Presence doesn’t have.

All in all im really pleased with the device and its fair to say that the UC Presence is my mobile device of choice at the moment.

Regards

Iain Smith

Lync 2013 – August Lync client Update .1504

Quote

Hello All

Yesterday Microsoft released a new Lync client update as part of the windows update. (its also available via a download here. http://support.microsoft.com/kb/2817621 there doesn’t seem to be much of information about the update apart from in also has the other patches within it..

The issue this patch is fixing is

– After you wake up the computer from hibernation mode, Lync 2013 becomes very slow and unusable.

Ive been running the update for a day now with no issues.

Regards

Iain Smith

 

Lync 2013 – Configuration Guide for using JetNEXUS Appliance as Reverse Proxy

Quote

Hello

A couple of weeks ago i created a detailed blog about life after TMG and what offerings there are in the way of a reverse proxy for Lync going forward. In that blog posting i mentioned IIS AAR and KEMP as options, but failed to mention JetNEXUS. Sorry JetNexus. !! So for that reason as a small ‘sorry’ ive given headspace to building one of their appliance’s in my lab to use as a RP against Lync 2013.

Also the people in the UK who are unsure on supportability of other vendor appliances I can confirm that JetNEXUS are primary based within UK with their HQ in Buckinghamshire.

Thanks to Gary Christie for supplying me with the license and details needed.

as usual the below is the lowdown on my Lab environment for the blog

DC = Win2008r2, AD level 2008r2

Lync 2013 SE, running on Windows2012

Windows 7, running the Lync 2013 Client

Peripheral devices for testing iphone 5 running IOS7beta5, Windows Phone 8

STEP 1 – creating the Virtual Jet Appliance. For this i, running the HyperV version of the Appliance

In your Hyper-V Manager, client right click on the server and select > Import Virtual Machine

1

Once you’ve selected the import option goto the Folder containing the ALB-X subfolders which in my case is C:\Users\SMITIAI\Downloads\jetNEXUS ALB-X VA\ ****NOTE: if you dont unpack the folder first you wont find the VMs!

next through the screen until you get to the import type screen. At this point Click “Copy the virtual machine (create a new unique ID)”

2

‘Next’ through the rest of the screens until you can select the finish button.

Once your Jet appliance is import select to connect and start the VM

3

STEP 2 – Configuration of IP’s base config

The simplest way to configure the initial install is to use the Jet Discovery software which comes with the appliance. Simply open the .exe and it will find your running appliance (Jdiscover.exe is in the same folder as the VM’s and at the time of writing the version is 3.6.1)

****Just to point out something completely bizarre at this point. On start up of the appliance it automatically selects an IP address from DHCP, which in my case it did find DHCP and subsequently associated itself and IP of xxx.xxx.1.204 which was/is the same IP to which my Lync 2013 SE was/is running on.!!?? odd. for me to get round this i had to down the SE to allow the appliance to finish starting up then i could change the IP on the appliance.. Look out for this little gotcha

Back to running the .exe, as stated it will find the Rp automatically and at this point you can add the necessary changes to the base config

4

once you’ve applied the required settings, right hand click and select connect to webportal

At this point the installation is complete. Next step is the RP configuration

STEP 3 – Setting up the RP as a Lync Reverse Proxy

Navigate to the IP address you specified PLUS the :PORTNUMBER 27376 ie: 192.168.1.223:27376

8

then apply the username and password (default is admin, password is jetnexus)

you will then jump into the jetnexus portal. The first thing im going to do in the portal is to update the password into a more sensible one. to do this you need to navigate to configure, security on the left hand pane

9

now onto further config work. Going to the Setup>appliance on the left hand pane i want to make sure my IP address for the RP is attached to the eth0 port.

10

If you did need to make any changes you just double click into the IP, Subnet etc to amend. Nice feature! (dont forgot to press update)

Im now going to add the default gateway into the RP

11

At this point nothing to taxing has taken place, so onto loading a jetpack. <A jetpack is a prebuilt configuration pack which you can get for Lync Frontend load balancing, Lync edge load balancing (both internal and External), exchange 2010, 2013 load balancing and last of all Lync Reverse Proxy )

Now to add the jet pack to my RP. to do this navigate to advance Software update. Of course you will have needed to created/download a jetpack first!.

I’m going to use the standard Lync RP jetpack then tweak to suit my needs

12

Now onto tweaking the appliance for my Lync environment

back to setup and IP services

13

lets now move onto importing our SSL cert to bind to the RP

to do this you need to navigate to the configure, then SSL

select import and selct your cert.

14

now lets bind the cert to the RP. now back to the setup, Ipservices and then select the actions TAB, then select SSL and use the dropdown to add your cert

15

now back to look and check your connection

16

and Finish

I must say the easiest of all the Reverse Proxy Appliances to set up for Lync. Using the LyncRP template was a breeze. Well done JetNexus, it was a simple setup and one i would recommend in the future.

Regards

Iain Smith

MVP Event – Cloud OS, Microsoft Offices London Cardinal Place

Hello All

Ever wondered what cloud OS is and how it can compliment your existing organisation. Well on the second week of September (9th through to the 13th Sept), the Microsoft MVP’s are putting on a event to tell/show you just that. The event is split into different formats for each day, so you can either attend all the days or cherry pick the one which is most relevant to you.

I hope you can attend as the event should be great. The event is open to everyone including MVPs, IT Professionals, Developers and Technical Decision Makers! 

Clicking the link before you can register your details to Microsoft.

ImageImage

9th to 13th September, join the MVP community

in London for a ‘real world’ look at the Microsoft Cloud OS

 

Image

Monday 9th September at the Microsoft Office, Victoria, London

Join leading MVPs for a two track one day event that tackles the delivery of Enterprise data platforms and analytics solutions.

 

Please register to attend either track 1 or track 2:

  • Track 1 will focus on building the modern enterprise data platform. In a series of three presentations we will tackle the issues of architecture, application frameworks, data integration and data exchange; learning all about the challenges faced by the modern data tier developer. Most importantly, we will learn how to creatively overcome them by enhancing our processing efficiency and analytical capability. Register to attend

 

  • Track 2 will focus on the creation of Business Intelligence and advanced analytics solutions that utilise both structured and un-structured data. We will demonstrate the use of data mining and predictive analytics technologies and also demonstrate how advanced visualisation technologies can be used by business users to deliver the insight and action required to drive real value from data.

Register to attend

 

Image

Tuesday 10th September at the Microsoft Office, Victoria, London

Join leading MVPs for a one day event to assist management and virtualization experts to understand the advances in the modern datacentre.

 

Each session will demonstrate how to:

  • Deliver best practices with Windows Server 2012 R2 and System Center 2012 R2
  • Lower costs through effective management of VMware and Hyper-V
  • Enable management of datacentres of any size!
  • Drive automation of complex applications with service templates

 

Register to attend

 

Image

Wednesday 11th September at the Microsoft Office, Victoria, London

Join leading MVPs for a one day event focusing on technology that make up the Microsoft Integration Platform.  Allowing organisations to leverage a combination of cloud and on-premise applications through the hybrid integration pattern.

 

Sessions will include:

  • Windows Azure Service Bus
  • Windows Azure BizTalk Services
  • Microsoft BizTalk Server (both on-premise and Cloud Virtual Machine)

 

Register to attend

 

Image

Thursday 12th September at the Microsoft Office, London, Victoria

Join leading MVPs for a one day event to understand how to manage your client devices in a single tool while reducing costs and simplifying management. Best of all, you can leverage your existing tools and infrastructure.

 

Sessions will include:

  • Helping with data security and compliance
  • Unified device management
  • What powers people-centric IT with Cloud OS?
  • Real World customer examples

 

Register to attend

 

Image

Friday 13th September at Microsoft Office, Victoria, London

The explosion in devices, connectivity, data and the Cloud is changing the way we develop and deliver software.  New infrastructure services permit existing server applications to be “lifted & shifted” into theCloud.  Attend a one day event to hear from MVPs about how Microsoft’s data platform and development tools enable you to develop, test, and deploy applications faster than ever.

 

Sessions will include:

  • Infrastructure services,
  • Media services,
  • Service Bus  & Mobile services

 

Register to attend

 

Lync 2013 – Deploying Topology Error – Failed to save persmission of the fileshare (ACLError: Access permissions error)

Quote

Evening

Welcome to your Friday Lunchtime 1 a day blog post

This is something i see a few times within a Lync deployment. ive never got the bottom of why it sometimes happens and sometimes doesn’t.? I would be happy for comments on this.

The scenario is when you publish your topology into a site (greenfield or other) you are presented with a warning on the successful publishing stating that the topology failed to save the permissions.? You might have already selected ‘everyone’ on the share full control but that still doesn’t seem enough.

5

6

To get past this issue is to add the following extra groups to the fileshare permissions

– RTCHSUniversalServices

– RTCComponentUniversalServices

– RTCUniversalServerAdmins

– RTCUniversalConfigReplicator

make all full control

7

Simple fix

Regards

Iain Smith

Lync 2013 – Enabling Sharepoint SkillSearch within the Lync Client

Quote

Happy Lunchtime

Thursdays 1 a day Lunchtime blog post

In this blog we will look at how to enable SharePoint searching within the Lync 2013 client. This is super simple to implement as its only 4 powershell commands

step 1

Login into one of your frontend Lync server/s (if you are EE).

open up Lync Management Shell

Firstly what we will do is do a simple get command to get an understanding of whats already within the client policy

using PS type Get-CSClientPolicy

11

you will see the information associated with each identity. For this blog post I will be adding the sharepoint setting to the global policy

with this in mind run the bellow PS command specifying your sharepoint portal information
Set-CSClientPolicy -identity global –SPSearchInternalURL http://<server>.<domain>/_vti_bin/search.asmx
Set-CSClientPolicy -identity global –SPSearchExternalURL http://<server>.<domain>/_vti_bin/search.asmx
Set-CSClientPolicy -identity global –SPSearchCenterInternalURL http://<server>.<domain>/SearchCenter/Pages/PeopleResults.aspx

Set-CSClientPolicy –SPSearchCenterExternalURL http://<server>.<domain>/SearchCenter/Pages/PeopleResults.aspx

***Its worth running the URL into IE before you run these powershells into the policy.

Once you’ve completed this, using your lync client, logout and kill the lync process for the client then log back in. Now using CTRL-right click open up the lync configuration option

ensure that the paths are being picked up by the client.

now in the lync client type a search ie: Application Development and select ‘Skills’

if you return a lot of entries you will see the option at the bottom of the Lync client to open the results within SharePoint

And that’s it…

Sametime for tomorrow for Fridays Lunchtime blog