Shulou(Shulou.com)06/02 Report--

"to see Lync 2013 upgrade SFB 2015 real project experience: please see Lync project experience-01-to-Lync project experience-10"

This series of blog posts:

Lync Project experience-01-coexistence Migration-Lync2013-TO-SFB 2015-Planning 01

Http://dynamic.blog.51cto.com/711418/1858520

Lync Project experience-02-coexistence Migration-Lync2013-TO-SFB 2015-Planning 02

Http://dynamic.blog.51cto.com/711418/1859143

Lync project experience-03-coexistence migration-Lync2013-TO-SFB 2015-complete

Http://dynamic.blog.51cto.com/711418/1861323

Lync project experience-04-coexistence and migration-Lync2013-TO-SFB 2015 Godaddy-renew public network certificate

Http://dynamic.blog.51cto.com/711418/1862409

Lync project experience-05-coexistence Migration-Lync2013-TO-SFB 2015-Edge Server replication status is abnormal

Http://dynamic.blog.51cto.com/711418/1866482

Lync project experience-06-measuring Skypefor Business Server 2015 server power consumption

Http://dynamic.blog.51cto.com/711418/1867299

Lync project experience-07-SkypeforBusiness2015 cost / performance comparison phones-Polycom CX700

Http://dynamic.blog.51cto.com/711418/1870438

Lync project experience-08-PolycomCX700-4.0.X-can log in to SFB 2015-can be updated to Chinese

Http://dynamic.blog.51cto.com/711418/1894504

Lync project experience-09-grab Spring Festival train tickets with Lync 2013 or Skype for Business 2015

Http://dynamic.blog.51cto.com/711418/1886028

Lync project experience-10 color Polycom CX700-keep popping up window to enter user name and password

Http://dynamic.blog.51cto.com/711418/1894508

Project description:

In order to realize unified communication, a listed enterprise integrates instant messaging, audio conference, video conference, teleconference, hardware video conference, mail, Office 365 and so on to achieve unified cooperation.

Status of the project:

1. Single domain, single forest.

two。 Both the domain functional level and the forest functional level use Windows Server 2012 R2.

3. The AD domain is a.org.

4. The default domain of Exchange Server 2013 uses a.com.

5. The mail server uses Exchange Server 2013, including 2 client access servers and 2 Mailbox server roles.

Project requirements:

1. Deploy Skype for Business Server 2015.

2. The SIP domain is a.com.

3. Use a public network certificate for a.com.

4. Alliance between a.com and Office 365.

5. Allied with other enterprises Skype for Business Server 2015 for a.com.

6. Integrate with Polycom RMX 1800 for a.com.

7. Do not purchase public network certificate for a.org.

8. Consider that TMG is a product discontinued by Microsoft, and use Active Directory Federation Services (ADFS) and Web Application Proxy (WAP) instead of TMG to achieve the release of the environment.

"the following video explains the release of WAP. This project is implemented step by step. You can also find my free blog post and explain it. "

* * *

"Skype for Business Server 2015-on-premises-deployment"

Http://edu.51cto.com/course/course_id-4158.html

"Skype for Business Server 2015-external to the enterprise-deployment"

Http://edu.51cto.com/course/course_id-5890.html

* * *

9. All Windows servers use Windows Server 2012 R2, the patch is installed to the latest, and the Windows firewall function is enabled.

10. The edge server and WAP use dual network cards, and the internal and external network cards use different network segments.

Project considerations:

1. The network card in the edge server, the network card in the WAP does not need a gateway, and the gateways of other servers remain unchanged and do not need to point to WAP.

two。 Add default routes for Edge servers and WAP.

Note:

a. The internal and external network card does not set the gateway.

b. Use Route add 10.10.10.0 mask 255.255.255.0 10.10.10.1-p to increase the default route.

c. Set the external network card to the gateway.

d. Use Route Print to see if the route is working

3. Whether to install the certificate

a. On internet, notebooks and mobile clients do not need to install certificates because public network certificates are used.

b. On intranet, notebooks need to add domains, not domains, and need to install an internal certificate trust chain, because a.org has not purchased a public network certificate.

c. On intranet, Android clients do not need to install certificates because Android does not verify certificates.

d. On intranet, ios clients (iPhone, iPad) need to install internal root certificate because a.org has not purchased a public network certificate.

4. Web services for the front-end pool

A. Internal Web service (override FQDN)

SFBFEPool01.a.com

B. external Web services

SFBFEPool01.a.com

5. Public network certificate

A. Office Online Server 2016

Public network certificates are used internally and externally.

b. Front-end server

Default certificate-external to the Web service-uses a public network certificate.

c. Edge server

External Edge Certificate (Public Internet)

D. ADFS

Use a public network certificate.

E. WAP

Use a public network certificate.

6. Test client

A. Android

Skype for Business 6.16.0.9 for Android

Http://www.androidapksfree.com/apk/skype-business-android-apk-latest-download/

One of the most painful things about remote implementation:

Android and iPhone on Internet can log in, but not internally.

Recommendations:

To prepare a physical machine or notebook internally, it is strongly recommended to use MuMu Simulator 1.15.3, install Skype for Business 6.16.0.9 for Android directly on it or visit http://www.androidapksfree.com/apk/skype-business-android-apk-latest-download/ to install it.

Not recommended: BlueStacks Blue stack 3. After installing Skype for Business 6.16.0.9 for Android, you need to log in with a Google account before you can use it.

B. IPhone

Ios 10.3.2 (you don't need to set it up before this version!)

Set-General-Certificate Trust Settings-trust your enterprise's private certificate.

c. Notebook

Because many clients install Office 2010 or Office 2007.

Recommendations:

Install Lync 2013 and install lyncmso2013-kb2889923-fullfile-x86-glb.exe to upgrade to Skype for Business 2015.

Install Skype for Business 2016 (install only). Toss slowly, there is a way on the Internet! I really can't handle it. If you call me again, you may pay for your hard work. )

7. Deployment mode

A. * connection.

b. Remote Desktop to a server.

c. Then remotely from this server to all servers, and save the password to facilitate reconnection. Note the use of the domain administrator administrator@a.com.

d. Use video recording software to record the implementation process, so that you can check whether there is any illegal operation later.

e. If you can't remotely, please contact your administrator.

8. Unexpected things, follow-up supplement!

(note: if you want to look good, please download the attachment, the format is better! )

Skype for Business Server 2015\ Lync Server 2013 planning, implementation, operation and maintenance, troubleshooting, training.

Consult QQ: 3313395633

Attachment: http://down.51cto.com/data/2366883

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.