For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

PK_29441's avatar
PK_29441
Icon for Nimbostratus rankNimbostratus
Aug 14, 2012

Lync and BIG-IP Deployment Guide

Hello,

 

 

I wanted to reach out to the community to see if I've missed something while configuring the iapp for Lync. I noticed that there isn't a rule for balancing HTTP port 80. According to the Lync front-end Ports requirements of technet, Port 80 is required to be load balanced. We've ran into a issue where Lync Phone Edition devices are not able to sign-in because they can't receive the Root CA cert for initial provisioning.

 

 

http://technet.microsoft.com/en-us/...98833.aspx

 

 

 

I've added the rule in manually, but it's not tagged to the application and traffic appears to pass through just fine. Would it be possible to update the iapp? I'm not sure how that process works.

 

 

Thanks,

 

P

 

 

microsoft
partner

2 Replies

  • mikeshimkus_111's avatar
    mikeshimkus_111
    Historic F5 Account
    Aug 14, 2012
    Hi PK,

     

    Thanks for posting. I can take this information and begin the process of updating the iApp.

     

     

    To clarify, a virtual server listening on port 80 and load balancing to the Lync Front End servers would have solved your issue. Is that correct? Can you share your iRule solution with us?

     

    thanks

     

    Mike
  • PK_29441's avatar
    PK_29441
    Icon for Nimbostratus rankNimbostratus
    Aug 14, 2012
    Hi Mike,

     

     

    Thanks for following up. I didn't create a iRule but I did use the GUI to create a new pool and virtual server.

     

     

    Pool - Called it Lync-2010_front_end_ip_80_pool and assigned it the Lync-2010_front_end_ip_http_monitor.

     

     

    Virtual Server - Called it Lync-2010_front_end_ip_80 with a service port of 80(HTTP). The protocol is TCP The HTTP Profile assigned is Lync-2010_front_end_ip_http (I believe this already exists in the iapp?). SNAT Pool is Auto Map. Under the Resources tab, default pool is Lync-2010_front_end_ip_80_pool and the default persistence profile is Lync-2010_front_end_ip_source_address_persistence.

     

     

    Let me know if that helps.

     

     

    Thanks,

     

    P