Overview — Configure the SBC for On-Premise PBX Integration With Skype
...
for Business
This Best Practice describes how to configure the Sonus SBC for On-Premise (OnPrem) PBX integration with Skype For Business (SFBSfB) when the Skype for Business Front End Pool is configured in Trusted Application mode. You must be familiar with configuring Sonus SBC, MSFT Active Directory, DNS, and Skype For Business in order to perform these steps.
Configuration Steps
Configuration for this feature involves specific settings in the following entities:
- DNS Server for creating an alias with SBC's FQDN.
- Skype for Business Management Shell to create a Trusted Application Pool and a Trusted Application ID.
- Active Directory to create users in Domain Controller for the OnPrem endpoints, and the Skype for Business Control Panel to enable relevant AD users for SFBSfB.
- SBC to configure all remaining settings for SFB integration.
Anchor |
---|
| Configuring the DNS Server |
---|
| Configuring the DNS Server |
---|
|
Login to DNS using domain admin credentials and create an alias for SBC:
Caption |
---|
|
|
Configure the
...
SfB Management Shell
Anchor |
---|
| Configuring the SFB Manager |
---|
| Configuring the SFB Manager |
---|
|
- Login to the Skype For for Business Front End Server.
- Launch Skype For for Business Server management shell.
- Type the following commands to create a Trusted Application Pool and Trusted Application ID:
...
Type the following command to enable CS Topology so that above configuration items can take effect in SFB SfB topology:
Enable-CsTopology
Caption |
---|
0 | Figure |
---|
1 | Commands and Output |
---|
|
|
Configure the Active Directory and the
...
SfB Control Panel
Anchor |
---|
| Configuring the AD and the SFB Control Panel |
---|
| Configuring the AD and the SFB Control Panel |
---|
|
- Login to the Active Directory domain controller machine with domain admin credentials.
- Create AD users.
- Login to the Skype For for Business front-end server.
- Launch the SFB SfB Control Panel.
- Enable AD users to be enterprise-enabled SFB SfB users on SFB on SfB Control Panel:
Caption |
---|
|
|
Configure the SBC
Anchor |
---|
| Configuring the SBC |
---|
| Configuring the SBC |
---|
|
Configure the SBC Host Name, Domain Suffix, and DNS IP Address
- Login to the SBC WebUI and navigate to Node Level Settings.
- Configure the SBC host name, domain suffix, and the DNS IP address:
Caption |
---|
0 | Figure |
---|
1 | Configure Node-level Settings |
---|
|
|
Verifying Certificates on the SBC
- Login to the SBC WebUI and navigate to Security > SBC Certificates.
- Verify that the Trusted CA Certificate and Sonus Certificates are installed:
...
Info |
---|
The following section describes SBC's analog FXS endpoints with Skype For for Business in this setup: Caption |
---|
0 | Figure |
---|
1 | Network Diagram: SBC Analog FXS Endpoints With Skype for Business |
---|
|
|
|
Determining Configuration Based on Inter-Op Mode
After completing the basic configuration on the SBC, the SBC can be further integrated in one of three different modes. Click the link that applies to your integration:
- o365 with Contact Registrant Table (CRT)
- o365 with AD
- o365 with CRT and AD
o365 with CRT
Anchor |
---|
| o365 with CRT |
---|
| o365 with CRT |
---|
|
Note |
---|
This section assumes that projected OnPrem users are SBC's FXS endpoints, and that the goal is to associate these endpoints with SBC's Contact Registrant Table and register them with Skype For for Business via SBC. |
Creating Contact Registrant Table Entries
Create entries for OnPrem users (in this example they are associated to FXS endpoints). These entries must match with the Skype For for Business users' SIP and tel: URI values.
...
Note |
---|
The user name, number, and URI association in the CRT must match the corresponding entries in the SFB SfB Control Panel:
|
Creating a CAS FXS Profile
- Login to the SBC WebUI and navigate to CAS >CAS Signaling Profiles.
- Create an FXS profile as shown below:
Caption |
---|
0 | Figure |
---|
1 | Creating a CAS FXS Profile |
---|
|
|
Creating an FXS to
...
SfB Transformation Table
- Login to the SBC WebUI and navigate to Transformation.
- Create a Transformation Table with a desired number transformation entry as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Transformation Table |
---|
|
|
Creating an FXS to
...
SfB Call Routing Table
- Login to the SBC WebUI and navigate to Call Routing Table.
- Create a table as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Call Routing Table |
---|
|
|
Creating a CAS FXS Signaling Group
- Login to the SBC WebUI and navigate to Signaling Groups.
- Create a CAS FXS Signaling Group by applying the above call route and fxs profile as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Creating a CAS FSX Signaling Group |
---|
|
|
- Login to the SBC WebUI and navigate to Transformation.
- Create a Transformation Table with a desired number transformation entry as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Creating an SBC to FXS Transformation Table |
---|
|
|
Creating an
...
SfB to FXS Call Routing Table
- Login to the SBC WebUI and navigate to Call Routing Table.
- Create a table as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Creating an SFB to FXS Call Routing Table |
---|
|
|
- Login to the SBC WebUI and navigate to Media > Media Crypto Profiles.
- Create a Mediation Crypto profile as shown below.
Caption |
---|
0 | Figure |
---|
1 | Creating a Media Crypto Profile |
---|
|
|
- Login to the SBC WebUI and navigate to Media > Media List.
- Create a Mediation List as shown below. Make sure to apply the Crypto Profile because it is needed by SFB calls.
Caption |
---|
0 | Figure |
---|
1 | Creating a Mediation List |
---|
|
|
Creating a SIP Signaling Profile
- Login to the SBC WebUI and navigate to SIP > SIP Profiles.
- Create a SIP Profile as shown below.
Caption |
---|
0 | Figure |
---|
1 | Creating a SIP Signaling Profile |
---|
|
|
Creating a SIP Server Table
- Login to the SBC WebUI and navigate to SIP > SIP Server Tables.
- Create a SIP Server Table as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Creating a SIP Server Table |
---|
|
|
Creating a SIP Signaling Group
Note |
---|
Apply the previously created SIP Profile, Media List, Call Routing Table, and SIP Server Table entries to this Signaling Group. In addition, set the inter-op mode as Office 365, and ensure that the Office 365 FQDN matches the dns suffix used in SFB SfB user's profile. |
Caption |
---|
0 | Figure |
---|
1 | Creating a SIP Signaling Group |
---|
|
|
o365 with AD
Note |
---|
This section assumes that projected OnPrem users are SBC's FXS endpoints and the goal is associate them with Active Directoryusers and to register them with Skype For for Business via SBC. |
Creating a CAS FXS Profile
- Login to the SBC WebUI and navigate to CAS >CAS Signaling Profiles.
- Create an FXS profile as shown below.
Caption |
---|
0 | Figure |
---|
1 | Creating a CAS FXS Profile |
---|
|
|
Creating an FXS to
...
SfB Transformation Table
- Login to the SBC WebUI and navigate to Transformation.
- Create a Transformation Table with a desired number transformation entry as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Creating an FXS to SFB Transformation Table |
---|
|
|
Creating an FXS to
...
SfB Call Routing Table
- Login to SBC WebUI and navigate to Call Routing Table.
- Create a table as shown below
...
Caption |
---|
0 | Figure |
---|
1 | Creating an FXS to SFB Call Routing Table |
---|
|
|
Creating an FXS Signaling Group
- Login to the SBC WebUI and navigate to Signaling Groups.
- Create a CAS FXS Signaling Group by applying the above call route and FXS profile as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Creating an FXS Signaling Group |
---|
|
|
- Login to the SBC WebUI and navigate to Transformation.
- Create a Transformation Table with a desired number transformation entry as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Creating an SBC to FXS Transformation Table |
---|
|
|
Creating an
...
SfB to FXS Call Routing Table
- Login to the SBC WebUI and navigate to Call Routing Table.
- Create a call routing table as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Creating an SFB to FXS Call Routing Table |
---|
|
|
- Login to the SBC WebUI and navigate to Media > Media Crypto Profiles.
- Create a Mediation Crypto Profile as shown below:
...
Caption |
---|
0 | Figure |
---|
1 | OnPrem: Mediation Crypto |
---|
|
|
- Login to the SBC WebUI and navigate to Media > Media List.
- Create a Mediation List as shown below. Make sure to apply the Crypto Profile because it is needed by SFB SfB calls.
Caption |
---|
0 | Figure |
---|
1 | Creating a Mediation List |
---|
|
|
Creating a SIP Signaling Profile
- Login to the SBC WebUI and navigate to SIP > SIP Profiles.
- Create a SIP Profile as shown below.
Caption |
---|
0 | Figure |
---|
1 | Creating a SIP Signaling Profile |
---|
|
|
Creating a SIP Server Table
- Login to the SBC WebUI and navigate to SIP > SIP Server Tables
- Create a SIP Server Table as shown below.
Note |
---|
The existing Contact Registrant Table is applied to the Server Table. This will allow CRT entries to register with Skype For for Business. |
Caption |
---|
0 | Figure |
---|
1 | Creating a SIP Server Table |
---|
|
|
Domain Controller and Active Directory
If inter-op Mode is planned to be used as o365 w/AD PBX, the following configuration pieces must be completed:
...
Caption |
---|
0 | Figure |
---|
1 | Pager Attribute set |
---|
|
|
Creating a SIP Signaling Group
Note |
---|
Note that previously created SIP Profile, Media List, Call Routing Table, and the SIP Server Table entries are applied to this Signaling Group. In addition, the inter-op mode is set as Office 365 w/AD PBX, AD Attribute as pager, and the Office 365 FQDN is matching with the dns suffix that is used in SFB user's profile. |
...
Caption |
---|
0 | Figure |
---|
1 | Creating a SIP Signaling Group |
---|
|
|
o365 with CRT and AD
Anchor |
---|
| o365 with CRT and AD |
---|
| o365 with CRT and AD |
---|
|
Note |
---|
This section assumes that candidate OnPrem users are SBC's FXS endpoints. The goal is to associate some of them with SBC's Contact Registrant Table, others with the Active Directory users, and then register them with Skype For for Business via SBC. |
Creating Contact Registrant Table Entries
Create entries for OnPrem users (in this example they are associated with FXS endpoints) that must match with the Skype For for Business users' SIP and tel: URI values.
...
Note |
---|
The sequence and user name, number, and URI association should be similar to the following:
|
Creating a CAS FXS Profile
- Login to the SBC WebUI and navigate to CAS >CAS Signaling Profiles.
- Create an FXS profile as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Creating a CAS FXS Profile |
---|
|
|
Creating an FXS to
...
SfB Transformation Table
- Login to the SBC WebUI and navigate to Transformation.
- Create a Transformation Table with a desired number transformation entry as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Creating an FXS to SFB Transformation Table |
---|
|
|
Creating an FXS to
...
SfB Call Routing Table
- Login to SBC WebUI and navigate to Call Routing Table.
- Create a table as shown below
...
Caption |
---|
0 | Figure |
---|
1 | Creating an FXS to SFB Call Routing Table |
---|
|
|
Creating an FXS Signaling Group
- Login to the SBC WebUI and navigate to Signaling Groups.
- Create a CAS FXS Signaling Group by applying the above call route and FXS profile as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Creating an FXS Signaling Group |
---|
|
|
- Login to the SBC WebUI and navigate to Transformation.
- Create a Transformation Table with a desired number transformation entry as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Creating an SBC to FXS Transformation Table |
---|
|
|
Creating an
...
SfB to FXS Call Routing Table
- Login to the SBC WebUI and navigate to Call Routing Table.
- Create a call routing table as shown below.
...
Caption |
---|
0 | Figure |
---|
1 | Creating an SFB to FXS Call Routing Table |
---|
|
|
- Login to the SBC WebUI and navigate to Media > Media Crypto Profiles.
- Create a Mediation Crypto Profile as shown below:
Caption |
---|
0 | Figure |
---|
1 | OnPrem: Mediation Crypto |
---|
|
|
- Login to the SBC WebUI and navigate to Media > Media List.
- Create a Mediation List as shown below. Make sure to apply the Crypto Profile because it is needed by SFB SfB calls.
Caption |
---|
0 | Figure |
---|
1 | Creating a Mediation List |
---|
|
|
Creating a SIP Signaling Profile
- Login to the SBC WebUI and navigate to SIP > SIP Profiles.
- Create a SIP Profile as shown below.
Caption |
---|
0 | Figure |
---|
1 | Creating a SIP Signaling Profile |
---|
|
|
Creating a SIP Server Table
- Login to the SBC WebUI and navigate to SIP > SIP Server Tables
- Create a SIP Server Table as shown below.
Note |
---|
The existing Contact Registrant Table is applied to the Server Table. This will allow CRT entries to register with Skype For for Business. |
Caption |
---|
0 | Figure |
---|
1 | Creating a SIP Server Table |
---|
|
|
Domain Controller and AD
If inter-op Mode will be used as o365 with AD PBX, the following configuration steps must be completed.
...
Caption |
---|
|
|
Configuring a SIP Signaling Group
Note |
---|
Note that previously created SIP Profile, Media List, Call Routing Table, and the SIP Server Table entries are applied to this Signaling Group. In addition, the inter-op mode is set as Office 365 w/AD PBX, AD Attribute as pager, and the Office 365 FQDN is matching with the dns suffix that is used in SFB SfB user's profile. |
Signaling Group with interop mode as Office 365 w/AD PBX and AD attribute as pager (for this exercise).
Caption |
---|
0 | Figure |
---|
1 | Creating a SIP Signaling Group |
---|
|
|
Enabling ICE Support for MS
...
SfB EDGE Server Integration
If the Skype For for Business Front End Pool is integrated with an EDGE Server, SBC must be configured with the following settings to support calls to/from SFB SfB clients behind the EDGE Server:
- Remote Authorization Table Entry with the Realm of SFBSfB's domain suffix, a valid domain user, and its credentials as shown below.
- SIP Server Table with the FQDN of the EDGE Server, Port 5062, protocol as TLS, the TLS profile that is used for SFB SfB Front End Pool integration, and the Remote Authorization Table entry that is created in the previous step as shown below.
- Node Level SIP Settings that is configured with the EDGE SIP Server table (from the previous step) as EDGE Server Destination settings as shown below.
- Front End Pool SIP Signaling Group configured with ICE Support settings as enabled as shown below:
...