Microsoft Interoperability - clnv.s3.amazonaws.com · • Intra Company Federation (chat & calling A/V) ... Lync Mediation Server only supports G.711, requires additional transcoding

Microsoft Interoperability Part 1 - Collaboration

Tobias NeumannTechnical Solutions Architect

BRKCOL-2610

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

Cisco Spark

Questions? Use Cisco Spark to communicate with the speaker after the session

1. Find this session in the Cisco Live Mobile App

2. Click “Join the Discussion”

3. Install Spark or go directly to the space

4. Enter messages/questions in the space

How

cs.co/ciscolivebot#BRKCOL-2610

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 4BRKCOL-2610

Proper planning is very important ...Off-road Trip Oman 2017

• Introduction Microsoft Collaboration Architecture

• Options for Interoperability

• Recommended Deployment Models

• Intra Company Federation (chat only)

• Intra Company Federation (chat & calling A/V)

• Intra Company Interoperability (telephony)

• Business to Business Federation (chat & calling)

• Interoperability when going cloud …

Agenda

Introduction Microsoft Collaboration Architecture


Microsoft Lync / Skype for Business

Front-EndSQL Server

Edge Archiving Role

Monitoring

Mediation

Office WebApps

XMPP Gateway AV Conferecing

Reverse Proxy

Director

Persistent ChatFront-End

Persistent ChatArchiving

Survivable Branch Appliance

Hardware Load Balancer

DNS Load Balancer

Phones

Video DevicesGateways

Transcoders

Storage Compute

Communication

Modalities

Many moving parts

Additional 3rd party components

Architecture Overview – on-premise

BRKCOL-2610 7


Microsoft Lync / Skype for Business (premise)

Audio:

• Mediation Server (Enterprise Voice)

• Remote Call Control (RCC)

Instant Messaging and Presence:

• SIP/SIMPLE Federation

• XMPP Federation

For Microsoft Lync 2010 and Office Communication Server 2007 via a separate OCS 2007 R2 XMPP Gateway

For Microsoft Lync 2013 via the XMPP Proxy (Edge), XMPP Gateway (Front-End)

(only tested and supported by Microsoft for federation with Google Talkhttps://technet.microsoft.com/en-us/library/jj205134(v=ocs.15).aspx)

Interoperability and specifics Lync 2010 / Lync 2013 / Skype for Business

RCC no longer supported with Skype for Business, replaced by Call via Work – significantly different features and capabilities

Microsoft Skype for Business RCC Reference: https://technet.microsoft.com/en-us/library/gg558658.aspx

BRKCOL-2610 8

https://technet.microsoft.com/en-us/library/jj205134(v=ocs.15).aspx

https://technet.microsoft.com/en-us/library/gg558658.aspx


Microsoft Lync

• Microsoft Lync supports point to point and multipoint video capabilities

• A complex set of integrations are available to interoperate Microsoft’s vendor specific video implementation with a h.264 AVC standards based video environment

• Please see BRKCOL-2611 – Cisco Interoperability with Microsoft Part 2 (Video Interoperability) for details

Video interoperability with Lync 2010 / Lync 2013 / Skype for Business

BRKCOL-2610 9


Microsoft Skype for Business Online – Office 365

• Communication capabilities of Skype for Business as a cloud-based service

• Presence, instant messaging, audio and video calling, rich online meetings web conferencing capabilities

• PSTN connectivity

Where available, hybrid

• Closed community

no standards based interoperability (i.e. IM & Presence or Video)

Architecture Overview - SaaS

BRKCOL-2610 10


What about Skype for Business Online and Voice Interoperability?

Not explicitly tested, there are no plan to test this scenario

Future Microsoft cloud to premise connectivity via SBC not cloud connector.

BRKCOL-2610 11


Internet

Skype for Business Online - Instant Messaging and Presence

Capabilities

SIP

Interoperability only supported with OCS, Lync or Skype for Business on premise systems

No standards based federation interface supported by Microsoft

Microsoft Office 365 Skype for Business Online Federation and Public IM Connectivity:

https://technet.microsoft.com/en-us/library/skype-for-business-online-federation-and-public-im-conectivity.aspx

BRKCOL-2610 12

https://technet.microsoft.com/en-us/library/skype-for-business-online-federation-and-public-im-conectivity.aspx


Microsoft Teams

We don‘t know yet …

Microsoft has announced roadmap information and plans

Several public statements suggest that future interoperability for voice and telephony services will be based on Session Border Controller no longer emphasising on Microsoft Cloud Connector. Telephony feature interoperability with existing systems and PSTN TBD.

BRKCOL-2610 13

Options for Interoperability

Presentation ID


Many options…

“How do I connect my existing Cisco Voice Infrastructure to my Microsoft real estate?”

“Which way can I provide a compelling user experience?”

“How can I communicate with my business partners, who are using Microsoft, from my Cisco Collaboration Solution?”

“What options do I have to integrate collaboration capabilities in my Microsoft Application Suite?”

… I am not going to tell you the answer!

BRKCOL-2610 16

Presentation ID17

Choice is yours…

This sessions tells you what to choose from...

Telephony Interoperability


Enterprise Voice Call Routing

User has multiple options to initiate a call

• Depending on dialing habit

• Called party

• License purchased

BRKCOL-2610 19





• Called party


Different results

• When dialing either SIP URI or phone number of Lync/SFB user (reverse number lookup), a “Lync to Lync” call is initiated

BRKCOL-2610 20





• Called party


Different results


• If a number is called and the called party is NOT a Lync/SFB user - call routed via mediation server (Enterprise Voice Routing)

BRKCOL-2610 21





• Called party


Different results



• If an Audio/Video call is initiated and the called SIP URI is not another Lync/SFB user – call routed via SIP routing logic (SIP static route)

BRKCOL-2610 22





• Called party


Different results



• If an Audio/Video call is initiated and the called SIP URI is not another Lync/SFB user – call routed via SIP routing logic (SIP static route)

BRKCOL-2610 23


Enterprise Voice Interoperability

A users view of the world…

Skype for Business only

• Reach corporate extensions

• Reach PSTN number

• Available via corporate extension

• Available via PSTN number

• Telephony feature set

In addition to previous use case

• Available via corporate extension on

both devices simultaneously

• Access to users on both platforms from

all user associated devices

• Telephony feature transparency

Skype for Business andCisco IP phone

Possible with Direct SIP Integration

• Integration with existing Cisco UCM system for access to corporate extensions and PSTN

• Telephony features only available within the Skype for Business Domain

Difficult to impossible to achieve

• Simultaneous reachability on both devices on different call control platforms (MSFT “Sim Ring” & CSCO “SNR”) high risk → call routing loops

• Telephony feature interoperability protocols SIP/QSIG not available with Mediation Server


Enterprise Voice Call RoutingSIP Trunk / Direct SIP Options 1/2

Flows show the SIP signaling and media paths in a SIP-trunk (Direct SIP) interoperability scenario

Lync Mediation Server only supports G.711, requires additional transcoding resources if any other codec is used by devices connected through SIP-trunk

Scenarios shown do not require the usage of a Media Termination Point (MTP)

BRKCOL-2610 25

OCS 2007 / Lync 2010 & 2013 / Skype for Business (no media bypass)

G.711RTaudio

S4B Client S4B Front End S4B Med. Server Cisco UCM

OCS 2007 / Lync 2010 & 2013 / Skype for Business (no media bypass), none G.711 on IP-PBX

G.711RTaudio

S4B Client S4B Front End S4B Med. Server Cisco UCM IOS Transcoder

G.729/iLBC


Enterprise Voice Call RoutingSIP Trunk / Direct SIP Options 2/2

With the introduction of Media Bypass in Lync 2010 the Lync client can initiate direct G.711 media streams. Media paths is not hair pinned through the Lync Mediation Server, no transcoding. Signaling via the Mediation Server.

Review Microsoft guidance regarding Media Bypass http://technet.microsoft.com/en-us/library/gg412740.aspx

Straight forward in a centralized (single site) topology without WAN links.

More complicated in a distributed topology with one or more branch - check the following:

Media Bypass shall only be utilized between WAN sites without bandwidth constrains

Media Bypass and Call Admission Control (CAC) are mutually exclusive

Media Bypass mandatorily requires all media to be represented by a single IP address – the reason why in the above example a Media Termination Point (MTP) has to be inserted.

BRKCOL-2610 26

G.711

Lync 2010, Lync 2013, Skype for Business (with Media Bypass)

S4B Client S4B Front End S4B Med. Server Cisco UCM

G.711


See hidden reference slides for further details27BRKCOL-2610

“To Bypass or not to Bypass that is the question”Media Bypass pros and cons

Single Site Deployment

• More scalable – no Mediation Server transcoding required

• LAN bandwidth CAC not required

• Simple redundancy configuration with Cisco UCM cluster and Microsoft Mediation Server Pool

Complex WAN Deployment

….Remote locations

• Highly complex to configure and troubleshoot

• Mutually exclusive to CAC, required in some WAN topologies

• Remote site MTPs required to keep media local

• Further complicated when redundancy is required

• With roaming devices (i.e. PCs) certain call scenarios will still result in hair pinning and suboptimal media routing


Mediation

Server Pool

Site 2

Site 1

Enterprise Voice Call RoutingMultiple Site example (Lync / Skype for Business to Cisco UCM)

To keep media local to a site each site requires a local media resource

Alternate media IP definition in Lync trunk configured matches IP address of single media resource in MRGL/MRG of the trunk on Cisco UCM side

Multiple sites require multiple trunks

… and multiple MRGs, MRGLs and media resources

… and multiple SIP security profiles, because unique identification of each trunk on Cisco UCM based on the signaling port (UCM side trunk identification based on peer IP address and local signaling port)

Site

2

Site

1

Central

Central

BRKCOL-2610 28

S4B Front-End

Server Pool


Enterprise Voice Call RoutingMultiple Site example (Lync / Skype for Business to Cisco UCM) with redundancy

Site

1a

Site

1b

Site

2a

Site

2b

Central

Two sites with Lync to Unified CM SIP trunk redundancy already require:

4 trunks, 4 MTPs/TRPs

4 MRGS, 4 MRGLs

2 SIP trunk security profiles

Site 1

Site 2

BRKCOL-2610 29

Mediation

Server PoolS4B Front-End

Server Pool


Enterprise Voice Call RoutingLync Media Bypass implications on redundancy

Fixed media IP configuration for GW on Lync forces 1:1 relation between inbound SIP trunk on Unified CM and MTP

Can not use MRG and MRGL for intelligent MTP selection (scalability, redundancy)

Availability of SIP trunk depends on SIP signaling peer and MTP availability

… which can not be monitored via SIP OPTIONS ping

Only indication of failing MTP allocation for inbound EO call from Lync:

If UCM fails to allocate a MTP call can be signaled failed and left to Lync to reroute using different SIP trunk

Outbound calls from Unified CM need to be EO and have to be via MTP (MTP required – Media Bypass)

BRKCOL-2610 30


Site 1

WAN

Enterprise Voice Call RoutingMultiple Site example – roaming user

Site

2

Site

1

Central

Unified selects trunk to Lync based on called destination (+E.164 prefix)

MTP (assumed) local to Lync client selected

Alternate media IP definition in Lync trunk configured in same site as Lync client -> bypass activated

Local media

Site 2

BRKCOL-2610 31

Mediation

Server Pool

S4B Front-End

Server Pool


Site 2

Site 1


Site

2

Site

1

Unified selects trunk to Lync based on called destination (+E.164 prefix), but Lync client moved to other site

MTP (assumed) local to Lync client selected

Alternate media IP definition in Lync trunk configured not in same site as Lync client -> no media bypass

Mediation server in media path

Media hairpins through central site

BRKCOL-2610 32

Mediation

Server Pool

S4B Front-End

Server Pool


Site 1

Site 2


False assumption about Lync client location could lead to even worse media path:

Unified CM selects trunk with MTP local to (assumed) location of Lync client: Site 2

Lync rejects media bypass, because MTP not local to IP address of Lync client

Mediation server in media path, Media hairpins through remote and central site

Site

2

Site

1

BRKCOL-2610 33

Mediation

Server Pool

S4B Front-End

Server Pool


Supported Feature Enterprise Voice (Direct SIP) withCisco Unified Communications Manager

• CLIP—calling line (number) identification presentation

• CLIR—calling line (number) identification restriction

• CNIP—calling Name identification presentation

• CNIR—calling Name identification restriction

• Alerting Name

• Attended call transfer

• Early attended call transfer

• CFU—call forwarding unconditional

• CFB—call forwarding busy

• CFNA—call forwarding no answer

• COLP—connected line (number) identification presentation

• COLR—connected line (number) identification restriction

• CONP—connected Name identification presentation

• CONR—connected Name identification restriction

• Hold and resume

• Conference call

• Audio Codec Preference List

• Call Park/Pickup(see limitation section)

• Extend and Connect

• Shared Line on Cisco Endpoints


Required Configuration for Enterprise Voice (Direct SIP) with Cisco Communications Manager

Skype for Business:

• Add Cisco UCM to Skype for Business Topology

• Trunk Configuration

• Route Configuration

• Voice Policy and PSTN Usage Configuration

• Dial Plan Configuration

• Call Park range Configuration

• Media Bypass Configuration

• User Configuration

• Client Configuration

Cisco Unified Communications Manager:

• SIP trunk security profile

• SIP profile

• Media resource group and media resource group list

• Assign media resource group list (MRGL) in the default device pool

• Region configuration

• Normalization script

• SIP trunk to Skype for Business

• SIP and SCCP phones device configuration

• Route Group, Route List and SIP Route PatternVoice Mail

• Route pattern to Skype for Business and Skype for Business call park range


Required Configuration for Enterprise Voice (Direct SIP) with Cisco Communications Manager

https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/interoperability-portal/cucm-skype-business-tls-appnote.pdf

Chat & Presence Interoperability


Chat & Presence InteroperabilityA blast from the past…

Business to Business FederationInter Domain Federation

Within a Business FederationIntra Domain Federation

Direct SIP SIMPLE Partitioned Intra Domain Federation

Chat & Calling (A/V) Federation VCS CPL

Chat & Calling (A/V) Federation VCS/Expressway Broker

Direct SIP SIMPLE Federation

Cisco ASA TLS Proxy SIP SIMPLE Federation

Direct XMPP Federation

Direct XMPP Federation with Cloud


Chat & Presence InteroperabilityYou told us…

• “Why is interoperability so complicated?”

• “Why do I need so many different boxes doing different things to achieve my goal?”

• “Why does it have to be so expensive to do interoperability?”

• “How can I seamless communicate with my business partners independent if they use Cisco, Microsoft or some other standards based solution?”

• “How can I do a phased migration after an acquisition to a unified Cisco solution?”

Things have changed..

• Microsoft deprecated support for XMPP Microsoft tested and supported only for Google Talk https://technet.microsoft.com/en-us/library/jj205134(v=ocs.15).aspx

• New vulnerabilities require new levels of security, TLS 1.0 no longer a viable option

… we did listen!

https://technet.microsoft.com/en-us/library/jj205134(v=ocs.15).aspx


Chat & Presence InteroperabilityA single architecture for Inter- and Intra Domain Federation

Business to Business FederationInter Domain Federation

Within a Business FederationIntra Domain Federation

Cisco Expressway SIP SIMPLE Federation with Microsoft

Cisco Expressway becomes the unified edge for all B2B communications

• Utilizing existing resources (B2B Video, Jabber MRA)

• Adds SIP SIMPLE capabilities on top of the already existing XMPP federation services

• Single routing instance for all B2B traffic

• Provides chat & calling B2B capabilities to Microsoft Skype for Business on premise and Skype for Business online

Cisco Expressway Partitioned Intra Domain Federation

Cisco Expressway as centralized routing instance for Microsoft Interoperability

• Streamlined configuration

• Single point of contact for all Microsoft based communications

• Removes requirement for 3rd party components (load balancers)

• Integrates chat & calling federation inside the enterprise (coexistence or migration)


Cisco Expressway Chat & Calling Interoperability How does it work?

• Microsoft uses a vendor specific dialect of SIP

• Cisco Expressway has been enhanced to allow Search Rules to be based on SIP “dialect” and the type of traffic (chat/presence or audio/video)

Cisco Expressway SIP SIMPLE Federation with MicrosoftComplex Routing (chat & calling)

MSFT SIP IM&P

MSFT AV & Share

Standard SIPAV & Share

MSFT SIP IM&PAV & Share

CMS

Expressway

S4B Front End UCM IM/P

UCM

Cisco Expressway SIP SIMPLE Federation with MicrosoftBasic Routing (chat & presence)

• Symmetric routing

• No certificate change required on Skype for Business Server

• Multiple neighbour zones supported with up to 6 neighbours

• Support Cisco UCM Multi Cluster deployment

ExpresswayUCM IM/PS4B Front End


Cisco Expressway Chat & Calling Interoperability The whole deal

Single SIP based routing architecture provides:

Expressway-EExpressway-C UCM IM&P

UCMCMS




• Intra Domain Federation for Chat and Calling


UCMCMS





• B2B Federation with Microsoft Skype for Business premise


UCMCMS






• B2B Federation with Microsoft Skype for Business online


UCMCMS







In addition:

• Jabber and Cisco IP phone mobile remote access


UCMCMS







In addition:


• B2B Federation with Cisco UCM solution

Expressway-E


UCMCMS







In addition:


• B2B Federation with Cisco UCM solution

• B2B Federation with 3rd party standard SIP endpoints

Expressway-E


UCMCMS


Cisco Expressway Chat & Calling Interoperability

• Presence and Chat between Cisco and Microsoft users (internal or B2B)

• Instant Messaging

• Point-to-point Message Exchange (IM)

• Plain text IM format

• Typing indication

• Basic emoticons

• Note: Due to the proprietary nature of Microsoft server group chat functionality, partitioned intradomain federation does not support group chat between Jabber clients and Microsoft Lync/SfB clients

With Cisco UCM IM&P 11.5.1 SU4 (planned January 31st 2018) temporary presence subscriptions fixed for Cisco Jabber clients

• Voice/Video calling between Cisco and Microsoft users, including bidirectional desktop sharing

• Smooth migration available to Cisco solution. Chat & Calling available during migration. Cisco provided tools allow buddy list migration

Features and use cases supported

Presence

CUCM IM/P maps the two different set of user’s states

following the rules reported in the next slides


Presence State Mappings between Microsoft & Cisco

Lync/SfB Cisco Jabber

Available Available

Busy Busy

Do Not Disturb Busy

Be Right Back Away

Away Away

In a call Away

Offline Offline

Cisco Jabber Lync/SfB

Available Available

Busy Busy

Do Not Disturb Busy

On the Phone Away

Offline Offline


Talking about DomainsRecommended Deployment – Flexible Jabber ID (JID)

Make the email address the multimodal communication address

Most Microsoft deployment user email address for SIP communication Mapped to msRTCSIP-primaryuseraddress attribute in Active Directory

Required for deployments utilizing multiple distinct email/SIP domains in a single Cisco UCM IM&P cluster or multi-cluster environment

Available in Cisco UCM IM&P with version 10.x or higher

Cisco UCM Directory synchronization allows to select attribute email or msRTCSIP-primaryuseraddress. Recommendation for migration scenarios is the to user the later.


Talking about Domains Configuration steps for Flexible Jabber ID

• Cisco UCM Directory LDAP Sync Statement, configure directory URI mapping

• Cisco UCM IM & Presence, configure Advanced Presence Settings

IM Address Schema – Directory URI

Systems will automatically import all domains configured in Active Directory

Existing buddy lists will be migrated to new flexible JID format <user>@<domain>

• Configure Cisco Jabber to use Flexible JID

<Directory>

<UseSIPURIToResolveContacts>

true</UseSIPURIToResolveContacts>

<SipUri>

mail

</SipUri>

</Directory>

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 53

A word on Contact Search

• Cisco Jabber contact sources

• Active Directory/LDAP

• Cisco UDS (service provided by Cisco UCM)

• Outlook personal contacts

• Microsoft Skype for Business/Lync

• Clients have local address book, created by nightly synchronization with AD by AddressBook service of Microsoft server (Lync or S4B)

• Only includes users that are enabled for Lync/S4B, aka that have msRTCSIP-primaryuseraddressattribute set (we get to that in a second)

Source for contacts

Cisco UCM UDS data source required for clients outside the corporate network using Mobile

Remote Access (MRA), Active Directory source not available when outside Corp. network and

not on VPN. New UDS Proxy service on Cisco UCM allows enhanced scalability beyond

160.000 directory items. Requires Cisco Jabber 11.7 or higher.

BRKCOL-2610


A word on Contact Search

• The Microsoft AddressBook service

will only sync contacts that have

attribute msRTCSIP-

primaryuseraddress set

• For migration screnarios the attribute

is set for all existing Microsoft users

• During migration when net new users

are added to Cisco UCM (never

enabled before for Microsoft Lync or

S4B) msRTCSIP-primaryuseraddress

must be set manually in Active

Directory so these users are included

into the AddressBook file that is to

Microsoft clients

Microsoft Address Book service in the context of migration


A word on Contact SearchTemporary Presence Subscription

When a users search for contacts (either contact source in Cisco Jabber or AddressBook for Microsoft

the search results are displayed including a snapshot of the users presence.

Since this is a temporary display of information, clients do not establish a full “subscription” for each of

the users in the result list. This is called a temporary presence subscription.

Up until now this issue prevented Jabber or Microsoft users to see presence in the search results.

With Cisco UCM IM&P 11.5.1 SU4 this issue has been addressed for Cisco Jabber clients

Cisco is actively investigating to provide a feature enhancement that will also solve this for Microsoft

Lync and S4B clients – not yet committed to a specific release

This issue does not affect contacts that have been added to the buddy list of either clients. Full presence

is displayed in that scenario.

Chat & Presence InteroperabilityIntra-Domain Federation

What we need to design and configure


Collaboration Infrastructure considerations

Using basic (default) SIP routing – Cisco IM&P will route all requests to Microsoft that match any the configured domains

Using advanced SIP routing – Cisco IM&P will verify that the destination user exist as a Microsoft (Lync or Skype for Business) user. Improves routing of mistyped/wrong SIP URIs

Advantages of the Expressway classification approach

Expressway SIP broker

Inbound and Outbound requests take different paths, makes configuration and

troubleshooting more complicated

Expressway traffic classification

Inbound and Outbound requests routed via same paths

• Single TLS per subject UCM IM&P

• Single TLS configuration S4B FE

• Modification of S4B FE certification optional (client/server role)


Configuration steps for Cisco Expressway classification

Required Configuration Steps … (1/2)

• Configure certificates on Lync and Cisco UCM

Highly recommended to use CA based certificates on both systems (Enterprise CA)

• Configure security parameters on Cisco UCM IM&P (ACL, TLS peer, TLS context)

Single neighbor, either single Cisco Expressway or Expressway Cluster

• Turn on Partitioned Intra Domain Federation & Configure SIP static route(s) on Cisco UCM IM&P

Single route per domain pointing to Cisco Expressway next hop

• Configure security parameters on Microsoft Lync (Trusted Application, Computer, etc.)

Single destination, Cisco Expressway

• Configure SIP static route(s) on Microsoft Lync

Single route per domain pointing to Cisco Expressway next hop



Required Configuration Steps … (2/2)

• Configure neighbor zones on Cisco Expressway

One neighbor zone for UCM IM&P and Microsoft S4B

• Configure search rules for specific traffic types

Route IM&P traffic from source zone S4B to Cisco UCM IM&P neighbor zone

Route IM&P traffic from source zone Cisco UCM IM&P to neighbor zone S4B



CUCM IM&P Configuration (1/2)

Security Incoming ACL

TLS Peer Subject

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 61Presentation ID


CUCM IM&P Configuration (2/2)

TLS Context Configuration

Enable Partitioned Intra Domain Federation

SIP Route



Microsoft Skype for Business / Lync Server

Skype for Business (Lync) PowerShell commands

Create Route$TLSrouteno1 = New-CsStaticRoute -TLSRoute -destination <expressway fqdn> -port 5061 –usedefaultcertificate $true -MatchUri <domain> Set-CsStaticRouteConfiguration –Route @{Add=$TLSrouteno1}

Create Application Pool New-CsTrustedAppicationPool –Identity <expressway fqdn> -Registrar <S4B FE fqdn> -Site 1 –TreatAsAuthenticated $true –ThrottleAsServer $true –RequiresReplication $false –OutboundOnly –false

Create Application New-CsTrustedApplication –ApplicationID expressway.<domain> -ApplicationPoolFQDN <expressway fqdn> -port 5061

Publish and enable the topology in Microsoft Skype for Business



Cisco Expressway configuration

Cisco IM&P neighbor zone

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 64Presentation ID



S4B neighbor zone




Search Rule From IM&P to S4B




Search Rule From S4B to IM&P


Instant Messaging and PresencePartitioned Intra Domain Federation – User Experience

BRKCOL-2610 67

Add Calling (Audio/Video) with Cisco Expressway classificationand Cisco Meeting Server (CMS)



Required Configuration Steps add calling…

• Cisco UCM

Configure Secure SIP Trunk Profile

Configure Secure SIP Trunk to Expressway

Configure SIP Route Pattern for URI Routing

Configure UCM Cluster Mixed Mode for End to End Encrypted Calls (SRTP) (not covered in the reference material)

• Configure additional neighbor zones on Expressway for Cisco UCM and CMS

• Configure search rules for routing of media (A/V) traffic

• No additional configuration required on Microsoft Skype for Business/Lync


Configuration steps for Cisco Expressway classificationCisco UCMConfigure Secure SIP Trunk Profile Configure Secure SIP Trunk to Expressway

BRKCOL-2610 70


Configuration steps for Cisco Expressway classificationCisco UCM

Configure SIP Route Pattern

In a multi domain environment this step needs to be repeated for each SIP domain.

BRKCOL-2610 71

<domain>


Configuration steps for Cisco Expressway classificationCisco Expressway

CUCM Neighbor Zone

BRKCOL-2610 72



CMS Neighbor Zone

BRKCOL-2610 73



Search Rules A/V S4B - CMS

BRKCOL-2610 74



Search Rules A/V CMS - UCM

BRKCOL-2610 75



Search Rules A/V UCM - CMS

BRKCOL-2610 76



Search Rules A/V CMS – S4B

BRKCOL-2610 77


Instant Messaging and PresencePartitioned Intra Domain Federation – Expressway classification

User Experience

Chat & Calling

BRKCOL-2610 78

What about external Federation


Configuring steps for Cisco Expressway classificationPartitioned Intra Domain Federation – with existing external B2B Federation

Both Solutions Cisco and Microsoft do support external Business to Business Federation via SIP SIMPLE

SIP Federation is based on DNS SRV records. DNS SRV for a particular SIP domain can only be represented by one of the two solution – Highlander: “There can be only one!“

Internet

[email protected]

S4B Edge Expwy-E

Who handles

federation for

company.com?DNS SRV Records

_sipfederationtls._tcp.

DNS SRV Records

_sipfederationtls._tcp.

Domain company.com

Standards based A/V externalfederation for _sip. and _sips aswell as XMPP federation can stillbe terminated to Cisco Expresswayfor B2B federation

BRKCOL-2610 80


Internet

Configuring steps for Cisco Expressway classificationPartitioned Intra Domain Federation – with existing external B2B Federation External SIP B2B Federation during Migration

S4BClient

S4BFront End

Cisco UCMIM&Presence

Cisco Jabber

Cisco UCM

Cisco Expressway

DNS SRV Records_sipfederationtls._tcp.atlanta.com

[email protected]

[email protected]

Alice on S4B initiates or receives communication with Bob S4B@ external domain

BRKCOL-2610 81


Internet

Configuration steps for Cisco Expressway classificationPartitioned Intra Domain Federation – with existing external B2B FederationExternal SIP B2B Federation during Migration

S4BFront End


Cisco Jabber

Cisco UCM

Cisco Expressway


Traffic Classification

[email protected]

[email protected]

Alice migrated to Jabber initiates communication Audio/Video call with Bob S4B@ external domain

BRKCOL-2610 82


Internet


S4BFront End


Cisco Jabber

Cisco UCM

Cisco Expressway


[email protected]

[email protected]

Alice migrated to Jabber initiates chat communication with Bob S4B@ external domain

BRKCOL-2610 83



Internet


S4BFront End


Cisco Jabber

Cisco UCM

Cisco Expressway


[email protected]

[email protected]

Bob S4B@ external domain initiates chat communication with Alice migrated to Jabber

BRKCOL-2610 84



Internet


Lync 2013Front End


Cisco Jabber

Cisco UCM

Cisco Expressway X8.8


[email protected]

[email protected]

Bob S4B @ external domain initiates Audio/Video communication with Alice migrated to Jabber

BRKCOL-2610 85




Required Configuration Steps Partitioned Intra Domain Federation with existing external B2B Federation with Skype for Business Edge …

• Cisco UCM

Configure SIP Route Pattern for URI Routing

• Cisco UCM IM&P

Configure SIP direct Inter-Domain Federation Route Pattern for URI Routing

• Configure search rules for routing Inter-Domain Federation traffic to S4B FE

Search rule to route A/V traffic from Cisco UCM to CMS (transcoding)

Search rule to route A/V traffic from CMS to Skype for Business

Search rule to route IM&P traffic from Cisco UCM IM&P to Skype for Business

• Utilizes existing Microsoft Skype for Business Edge configuration


Configuration steps for Cisco Expressway classificationPartitioned Inter Domain Federation

External SIP B2B Federation during Migration – Configuration

Cisco UCM Cisco UCM IM&P

BRKCOL-2610 87



External SIP B2B Federation during Migration – Configuration

Cisco Expressway Search Rules

BRKCOL-2610 88

Partitioned Inter Domain Federation


Configuration steps for Cisco Expressway classificationPartitioned Intra Domain Federation – with existing external B2B Federation

External SIP B2B Federation during Migration - Configuration

Microsoft Lync Server

SIP Federation Next HopFQDN discovered through_sipfederationtls DNS SRVrecord

BRKCOL-2610 89

Chat & Presence InteroperabilityIntra-Domain Federation

Migration


Instant Messaging and PresencePartitioned Intra Domain Federation – Migration...

Remember the Command Line Migration Tools ?

ExportContacts.EXE, DisableAccount.EXE, DeleteAccount.EXE

More Breaking News! Cisco UCM IM & Presence 11.5 Provides New GUI Based Migration Tool

• Replaced 3 tools with one easy to use Windows application

• Old tools had to be run on EVERY server in the deployment with multiple command line

arguments

• New application is run on the Front-End server. Will connect remotely to all of the other

servers in the deployment .

• Added progress bars/counters for each stage of the migration

• Error handling / reporting has been greatly improved

• Added support for validating user accounts, before they get migrated:

• Validates that accounts exist and are enabled in Active Directory

• Validates that accounts exist and are enabled on the LCS/OCS/Lync server

BRKCOL-2610 91


Instant Messaging and PresencePartitioned Intra Domain Federation – Migration...

• Added validation at every step of the process

• Does not let the admin continue without validating previous stages

• Contextual tool tip help guides the admin through the process

BRKCOL-2610 92

Chat & Presence InteroperabilityInter-Domain Federation



Full Business to Business / Inter Domain Federation using Cisco Expressway

It is possible to utilize an existing Microsoft Federation environment, during migration

After successful migration it is recommended to transfer the federation functionality completely to Cisco Expressway for all modalities and use cases

• SIP B2B Federation with Microsoft cloud O365/Skype for Business online

• SIP B2B Federation with Microsoft Skype for Business or Lync on premise

• Standard XMPP Federation (Cisco or 3rd party)

• Standard SIP Audio/Video (Cisco or 3rd party)



Required Configuration steps Inter Domain Federation with Cisco Expressway …

The following steps assume that during migration the previous example has been implemented

• Configure search rules for routing Inter-Domain Federation traffic B2B

Search rule to route A/V traffic from Cisco UCM to CMS (transcoding)

Modify search rule to route A/V traffic from CMS to Expressway-E traversal zone

Modify search rule to route IM&P traffic from Cisco UCM IM&P to Expressway-E traversal zone

• Utilizes existing Expressway-C, Expressway-E traversal zone and DNS neighbor zone

Application Interoperability


Application InteroperabilityMicrosoft Office client and server side interoperability

Cisco Jabber Collaboration

Solution

Fully integrated into

Microsoft Office, on-premise

or Office 365(*)

(*) Check Release Notes for supported Office 365 deployment models

Cisco Jabber 11.x support

BRKCOL-2610 97


Cisco has been working with Microsoft to add include a presence API in office 2016 Mac.

Jabber for Mac users now have presence and communication launch from office contact card

Jabber 11.9 Integrations Office 2016 for Mac

• Show Presence

• Start Chat Session

• Make Voice/Video CallsOffice 2016

V15.33 and later

BRKCOL-2610 98


... And customers using Office 365 Outlook Web access can also launch Jabber Chat and calls…

Jabber 11.9 Integrations Office 365 Outlook Web Client

Start Chat

Chat icon can now launch Jabber

Make a Call

Click telephone numbers to call

No presence in OWA

BRKCOL-2610 99


Application InteroperabilityFunctionality available at the application level

• Cisco Jabber can integrate with the Microsoft Office suite Click-to-X (click-to-call, click-to-IM, click-to-conference)

Presence light up of Microsoft Contact card

Store Instant Messaging conversation history in Outlook/Exchange

• Microsoft Exchange integration (Exchange on-premise and Exchange

online)Calendar integration (client or server side)

Unified Messaging integration – Cisco Unity Connection

• Microsoft SharePoint integration (SharePoint on-premise and

SharePoint online)Click-to-X (click-to-call, click-to-IM, click-to-conference)

Presence light up of Microsoft Contact card

BRKCOL-2610 100


Application InteroperabilityOrganizations moving commodity workloads to the cloud

Collaboration services integrated with cloud based applications (i.e. Exchange, SharePoint)

…while maintaining today’s required telephony functionality and PSTN access

…while enhancing communication services with standards based interoperable business to

business and consumer functionality

Internet

PSTN B2B

C2B

BRKCOL-2610 101


Application InteroperabilityOrganizations moving commodity workloads to the cloud

• Active Directory proxyAddresses attribute required for Office integration and light up

• Cisco Unity Connection messaging integration with Exchange Online via Exchange Web

Services (EWS)

Internet

PSTN B2B

C2B

ProxyAddresses

AD attribute

EWS

BRKCOL-2610 102

What about Cisco Spark?


Cisco Spark Hybrid Service - Connected Calling

Call Service Connect - connects Cisco Spark & the enterprise phone system – so they behave as one

Your Spark app becomes an enterprise softphone

Provides voice and video interoperability between Jabber and Spark

User benefits:

• Choice: use Jabber or Spark to call anyone without worrying about which you or the other person is using

• One number: be reached on Spark, Jabber, or a deskphone. Choose to take the call on whichever suits you best at that moment

• Reach everyone: call company extensions, PSTN numbers, Spark only users, and even video bridge numbers

• Company dial plan: dial from the Spark app as you would from your deskphone - call PSTN numbers via enterprise phone system

• Make the most of video assets: en-route to the office start a call on a mobile device and hand off to a room system when you arrive

CiscoOn-Premises & Partner Hosted HCS

CiscoCollaboration

Cloud

BRKCOL-2610 104


Cisco Spark Hybrid Service - Connected Calling

When Cisco Spark User is enabled for Hybrid Call Service Connect Business to Business Calls are routed via the Enterprise (Cisco UCM, Expressway B2B)

Combining Cisco Spark Hybrid Call Service Connect with Expressway X8.9 Cisco to Microsoft B2B Federation, Cisco Spark Users can call Lync 2013, Skype for Business or Skype for Business Online Users (audio, video and two way screen sharing)

At this point there is no messaging interoperability available

Preview, under

evaluation

BRKCOL-2610 105


Call Routing from Spark via Hybrid Service Configuration Outgoing to O365

Cisco Collaboration

CloudSIP call from Spark (Hybrid) signaled to Enterprise CC

Destination URI Bob@<office365 domain>

Routed through Spark Traversal Zone

http REST

SIP Route Pattern <office365 domain>

towards Expressway-C

Search Rule <office365 domain>

to CMS

Incoming Call

Forwarding <office365 domain>

Outbound Call

<office365 domain> as Lync call

Expressway-C

Search Rule

<office365 domain> to

B2B/MRA Traversal Zone

Search Rule

<office365 domain>

to DNS Zone

Expressway Hybrid Services

Connectors

AXL

DNS lookup for _sipfederationtls._tcp.<office365 domain>

Preview, under

evaluation

BRKCOL-2610 106

mailto:[email protected]


Call Routing from S4B (O365) to Spark via Hybrid Configuration incoming from O365

Cisco Collaboration

CloudSIP call to Spark, destination cloud

URI Alice@<xyz>.ciscospark.com

Through Spark Traversal Zone

http REST

SNR / Hybrid Services

Search Rule <customer domain>

from CMS to UCM

Incoming Call

Forwarding <customer domain>

Outbound Call

<customer domain> as standard SIP

Call Expressway-C

Search Rule

Type MSFT SIP

<customer domain>

to CMS

Incoming Search Rule

<customer domain>

To B2B Traversal Zone

DNS lookup for _sipfederationtls._tcp.<customer domain>

Expressway Hybrid Services

Connectors

AXL

Preview, under

evaluation

BRKCOL-2610 107

mailto:tneumann@<xyz>.ciscospark.com


Call Routing from S4B (O365) to Spark via Hybrid Configuration Example

SX20 Spark registered, paired via proximity calling S4B user, screen share SX20 visible on S4B

Preview, under

evaluation

BRKCOL-2610 108


Call Routing from S4B (O365) to Spark via Hybrid Configuration Example Preview, under

evaluation

SX20 Spark registered, paired via proximity calling S4B user, screen share from S4B visible on SX20

BRKCOL-2610 109

Summary


Cisco Interoperability with Microsoft Many options to interoperate

• Identify your requirements and select the right scenario for your environment

User experience

Technical feasibility

Complexity

Operational implications

• Understand the pros and cons of the selected scenario

• “Mileage” of certain functionalities might vary when applied to a real life environment

…Media Bypass in multi site deployment

• Thoroughly evaluate (PoC)

• Cisco remains committed to support interoperability scenarios

BRKCOL-2610 111


How to get hands on experience?

Cisco UCM 11.5, Jabber 11.7+ and Expressway X8.9+ Traffic Classification hands on lab available via Cisco dCloud

Go to http://dcloud.cisco.com (CCO login required)

BRKCOL-2610 112

http://dcloud.cisco.com/


• Please complete your Online Session Evaluations after each session

• Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt

• All surveys can be completed via the Cisco Live Mobile App or the Communication Stations

Don’t forget: Cisco Live sessions will be available for viewing on-demand after the event at www.ciscolive.com/global/on-demand-library/.

Complete Your Online Session Evaluation

http://ciscolive.com/Online

http://www.ciscolive.com/global/on-demand-library/


Continue Your Education

• Demos in the Cisco campus

• Walk-in Self-Paced Labs

• Tech Circle

• Meet the Engineer 1:1 meetings

• Related sessions

114BRKCOL-2610

Thank you

Documents

Microsoft Interoperability - clnv.s3.amazonaws.com · • Intra Company Federation (chat & calling A/V) ... Lync Mediation Server only supports G.711, requires additional transcoding