For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Richard_22613's avatar
Richard_22613
Icon for Nimbostratus rankNimbostratus
Mar 25, 2013

F5 Lync iApp with Cisco firewalls

I have configured the Lync iApp on a F5 LTM in our DMZ behind a Cisco firewall.   The client AV traffic goes through the firewall, hits the F5, which sends it on to one of the edge servers (in the...
microsoft
partner
PJG_71968's avatar
PJG_71968
Icon for Nimbostratus rankNimbostratus
Jun 20, 2013
All, I just thought I would add what we found to be the final piece to the jigsaw of Lync Edge Server Load Balancing.

 

 

We were seeing odd behavoir whereby we were seeing full traffic in and out to one of the external interfaces by the other two were receiving Syn packets, but were not sending Syn Acks back to the source.

 

 

So it transpires that each of the 3 public facing interfaces requires a default gateway set to be the self ip of the big-ip. This is odd, as we thought that a server only ever has one Default gateway. Anyway, as soon as we set it as such... Voila.

 

 

So just to confirm:

 

 

1 – Set the default gateways on each of the Lync Public Interfaces to be the Big-IP Self IP (obviously in the network your working in!).

 

2 – Assign a forwarding VIP on the Big-IP. (See above for the details).

 

3 – Set a FL4 profile to the Forwarding VIP with Loose Connections and Loose Close enabled.

 

 

Cheers... Phil