Shulou(Shulou.com)06/03 Report--

Server preparation section:

1. Edge servers do not join the domain and only need to modify the DNS suffix of the computer name.

two。 The edge server requires 2 network cards.

IN Nic: configure IP address, configure DNS, do not configure default gateway

OUT network card: configure IP address, not DNS, configure default gateway

3. Install internal CA root certificate and do trust.

4. Install components for the Server2012R2 server.

.Net3.5

.Net 4.5 (Http activation)

Identy Foundation 3.5

5. If the edge server, IN, Out network card, and the front-end server are not in the same network segment (or network area), you need to configure host routing.

6. If there is a firewall between the edge server and the front-end server, you need to open the relevant ports (see Visio diagram).

7. Router port mapping (external access)

8. Public network domain name resolution, internal domain name resolution

Public network resolution:

_ sipfederationtls._tcp. Federation and public IM connections

_ sip._tls. Public network client access

Sip. Access Edge Server

Lyncdiscover. Public network mobile devices automatically discover addresses

Meet URL Public Network Conference access

Dial-in URL public network telephone dial-in setting address

Public network access address (rp) of the external Web Services FQDN front-end server

Private network resolution:

_ sipinternaltls._tcp.

Lyncdiscoverinternal.

Lyncdiscover. Resolve to public network address

Pool FQDN

Admin URL

Meet URL

Dial-in URL

Internal Web Services FQDN

External Web Services FQDN resolves to public network address

9. Public network certificate preparation (PS: Aliyun public network certificate, free for single domain name)

Edge Server role installation section:

1. Front-end server, modify topology, associate edge server

two。 Front-end server, publishing topology

3. Front-end server, exporting topology profil

Export-CsConfig-FileName c:\ config.zip

4. Edge server, using configuration files to install the core components of the edge server and local storage

5. Edge server, installation component

6. Deal with the edge certificate section

7. Start Edge Services

8. Verify:

Whether the edge service starts normally

In the SFB Management console, view the replication status of the edge

Telnet tests the port used by the edge server

Use nslookup to verify public network resolution

The client uses the public network login authentication

Edge server deployment considerations:

1. If you need to make an alliance, the external network must use a public network certificate

two。 If you need to make an alliance with Skype, the external network must use a public network certificate and apply to Microsoft (enterprise batch customers, Microsoft partners, etc.). )

3. If message push is required, the external network must use a public network certificate

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.