<<

BRKCOL-2610

Microsoft Interoperability Part 1 - Collaboration

Tobias Neumann Technical Solutions Architect Cisco Spark

Questions? Use Cisco Spark to communicate with the speaker after the session

How 1. Find this session in the Cisco Live Mobile App 2. Click “Join the Discussion” 3. Install Spark or go directly to the space 4. Enter /questions in the space

cs.co/ciscolivebot#BRKCOL-2610

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public Proper planning is very important ... Off-road Trip Oman 2017

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 4 Agenda

• Introduction Microsoft Collaboration Architecture

• Options for Interoperability

• Recommended Deployment Models • Intra Company Federation (chat only) • Intra Company Federation (chat & calling A/V) • Intra Company Interoperability (telephony) • Business to Business Federation (chat & calling) • Interoperability when going cloud … Introduction Microsoft Collaboration Architecture Microsoft Lync / for Business Architecture Overview – on-premise

Communication Modalities

Mediation Director Many moving Edge Archiving Role parts Persistent Chat Reverse Proxy Archiving Front-End Persistent Chat Monitoring Front-End SQL Server Office Web XMPP Gateway AV Conferecing Apps

DNS Load Balancer Storage Compute Additional 3rd Survivable Branch Appliance Video Devices party components Phones Gateways Transcoders Hardware Load Balancer

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 7 Microsoft Lync / (premise)

Interoperability and specifics Lync 2010 / Lync 2013 / Skype for Business . Audio: RCC no longer supported with Skype for Business, replaced by • Mediation Server (Enterprise Voice) Call via Work – significantly different features and capabilities • Remote Call Control (RCC) . and Presence: • SIP/SIMPLE Federation • XMPP Federation For Microsoft Lync 2010 and Office Communication Server 2007 via a separate OCS 2007 R2 XMPP Gateway For Microsoft Lync 2013 via the XMPP Proxy (Edge), XMPP Gateway (Front-End) (only tested and supported by Microsoft for federation with Talk ://technet.microsoft.com/en-us/library/jj205134(v=ocs.15).aspx) Microsoft Skype for Business RCC Reference: https://technet.microsoft.com/en-us/library/gg558658.aspx

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 8 Microsoft Lync

Video interoperability with Lync 2010 / Lync 2013 / Skype for Business • Microsoft Lync supports point to point and multipoint video capabilities • A complex set of integrations are available to interoperate Microsoft’s vendor specific video implementation with a h.264 AVC standards based video environment • Please see BRKCOL-2611 – Cisco Interoperability with Microsoft Part 2 (Video Interoperability) for details

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 9 Microsoft Skype for Business Online – Office 365 Architecture Overview - SaaS • Communication capabilities of Skype for Business as a cloud-based service • Presence, instant messaging, audio and video calling, rich online meetings web conferencing capabilities • PSTN connectivity Where available, hybrid • Closed community no standards based interoperability (i.e. IM & Presence or Video)

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 10 What about Skype for Business Online and Voice Interoperability?

Not explicitly tested, there are no plan to test this scenario Future Microsoft cloud to premise connectivity via SBC not cloud connector.

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 11 Skype for Business Online - Instant Messaging and Presence

Capabilities

Interoperability only supported with OCS, Lync or Skype for Business on premise systems SIP No standards based federation interface supported by Microsoft

Microsoft Office 365 Skype for Business Online Federation and Public IM Connectivity: https://technet.microsoft.com/en-us/library/skype-for-business-online-federation-and-public-im-conectivity.aspx

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 12

We don‘t know yet … Microsoft has announced roadmap information and plans

Several public statements suggest that future interoperability for voice and telephony services will be based on Session Border Controller no longer emphasising on Microsoft Cloud Connector. Telephony feature interoperability with existing systems and PSTN TBD.

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 13 Options for Interoperability Presentation ID “How do I connect my existing Cisco Voice Infrastructure to my Microsoft real Many options… estate?” “Which way can I provide a compelling user experience?” “How can I communicate with my business partners, who are using Microsoft, from my Cisco Collaboration … I am not Solution?” “What options do I have to integrate going to tell you collaboration capabilities in my Microsoft the answer! Application Suite?”

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 16 Choice is yours…

This sessions tells you what to choose from... Presentation ID17 Telephony Interoperability Enterprise Voice Call Routing

User has multiple options to initiate a call • Depending on dialing habit • Called party • License purchased

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 19 Enterprise Voice Call Routing

User has multiple options to initiate a call • Depending on dialing habit • Called party • License purchased

Different results • When dialing either SIP URI or phone number of Lync/SFB user (reverse number lookup), a “Lync to Lync” call is initiated

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 20 Enterprise Voice Call Routing

User has multiple options to initiate a call • Depending on dialing habit • Called party • License purchased

Different results • When dialing either SIP URI or phone number of Lync/SFB user (reverse number lookup), a “Lync to Lync” call is initiated • If a number is called and the called party is NOT a Lync/SFB user - call routed via mediation server (Enterprise Voice Routing)

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 21 Enterprise Voice Call Routing

User has multiple options to initiate a call • Depending on dialing habit • Called party • License purchased

Different results • When dialing either SIP URI or phone number of Lync/SFB user (reverse number lookup), a “Lync to Lync” call is initiated • If a number is called and the called party is NOT a Lync/SFB user - call routed via mediation server (Enterprise Voice Routing) • If an Audio/Video call is initiated and the called SIP URI is not another Lync/SFB user – call routed via SIP routing logic (SIP static route)

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 22 Enterprise Voice Call Routing

User has multiple options to initiate a call • Depending on dialing habit • Called party • License purchased

Different results • When dialing either SIP URI or phone number of Lync/SFB user (reverse number lookup), a “Lync to Lync” call is initiated • If a number is called and the called party is NOT a Lync/SFB user - call routed via mediation server (Enterprise Voice Routing) • If an Audio/Video call is initiated and the called SIP URI is not another Lync/SFB user – call routed via SIP routing logic (SIP static route)

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 23 Enterprise Voice Interoperability

A users view of the world…

Skype for Business only Skype for Business and Cisco IP phone

• Reach corporate extensions In addition to previous use case • Reach PSTN number • Available via corporate extension on • Available via corporate extension both devices simultaneously • Available via PSTN number • Access to users on both platforms from • Telephony feature set all user associated devices • Telephony feature transparency Possible with Direct SIP Integration Difficult to impossible to achieve • Integration with existing Cisco UCM system • Simultaneous reachability on both devices on for access to corporate extensions and PSTN different call control platforms (MSFT “Sim • Telephony features only available within the Ring” & CSCO “SNR”) high risk → call routing Skype for Business Domain loops • Telephony feature interoperability protocols SIP/QSIG not available with Mediation Server

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 24 Enterprise Voice Call Routing SIP Trunk / Direct SIP Options 1/2 OCS 2007 / Lync 2010 & 2013 / Skype for Business (no media bypass) S4B Client S4B Front End S4B Med. Server Cisco UCM

RTaudio G.711 OCS 2007 / Lync 2010 & 2013 / Skype for Business (no media bypass), none G.711 on IP-PBX S4B Client S4B Front End S4B Med. Server Cisco UCM IOS Transcoder

RTaudio G.711 G.729/iLBC Flows show the SIP signaling and media paths in a SIP-trunk (Direct SIP) interoperability scenario Lync Mediation Server only supports G.711, requires additional transcoding resources if any other codec is used by devices connected through SIP-trunk Scenarios shown do not require the usage of a Media Termination Point (MTP)

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 25 Enterprise Voice Call Routing SIP Trunk / Direct SIP Options 2/2 Lync 2010, Lync 2013, Skype for Business (with Media Bypass)

S4B Client S4B Front End S4B Med. Server Cisco UCM

G.711 G.711 With the introduction of Media Bypass in Lync 2010 the Lync client can initiate direct G.711 media streams. Media paths is not hair pinned through the Lync Mediation Server, no transcoding. Signaling via the Mediation Server.

Review Microsoft guidance regarding Media Bypass http://technet.microsoft.com/en-us/library/gg412740.aspx Straight forward in a centralized (single site) topology without WAN links. More complicated in a distributed topology with one or more branch - check the following: Media Bypass shall only be utilized between WAN sites without bandwidth constrains Media Bypass and Call Admission Control (CAC) are mutually exclusive Media Bypass mandatorily requires all media to be represented by a single IP address – the reason why in the above example a Media Termination Point (MTP) has to be inserted.

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 26 “To Bypass or not to Bypass that is the question” Media Bypass pros and cons

Single Site Deployment Complex WAN Deployment

…. Remote locations • More scalable – no Mediation Server • Highly complex to configure and troubleshoot transcoding required • Mutually exclusive to CAC, required in some • LAN bandwidth CAC not required WAN topologies • Simple redundancy configuration with Cisco • Remote site MTPs required to keep media UCM cluster and Microsoft Mediation Server local Pool • Further complicated when redundancy is required • With roaming devices (i.e. PCs) certain call scenarios will still result in hair pinning and suboptimal media routing See hidden reference slides for further details BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 27 Enterprise Voice Call Routing Multiple Site example (Lync / Skype for Business to Cisco UCM)

Site 1

Site 2 Site Central Site 1 Site

Central

S4B Front-End Site 2 Mediation Server Pool Server Pool To keep media local to a site each site requires a local media resource Alternate media IP definition in Lync trunk configured matches IP address of single media resource in MRGL/MRG of the trunk on Cisco UCM side Multiple sites require multiple trunks … and multiple MRGs, MRGLs and media resources … and multiple SIP security profiles, because unique identification of each trunk on Cisco UCM based on the signaling port (UCM side trunk identification based on peer IP address and local signaling port)

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 28 Enterprise Voice Call Routing Multiple Site example (Lync / Skype for Business to Cisco UCM) with redundancy

Site 1 Site 2b Site

Site2a Central

Site 1b Site Site 1a Site

Site 2

Mediation S4B Front-End Server Pool Server Pool

Two sites with Lync to Unified CM SIP trunk redundancy already require: 4 trunks, 4 MTPs/TRPs 4 MRGS, 4 MRGLs 2 SIP trunk security profiles

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 29 Enterprise Voice Call Routing Lync Media Bypass implications on redundancy Fixed media IP configuration for GW on Lync forces 1:1 relation between inbound SIP trunk on Unified CM and MTP Can not use MRG and MRGL for intelligent MTP selection (scalability, redundancy) Availability of SIP trunk depends on SIP signaling peer and MTP availability … which can not be monitored via SIP OPTIONS ping Only indication of failing MTP allocation for inbound EO call from Lync: If UCM fails to allocate a MTP call can be signaled failed and left to Lync to reroute using different SIP trunk Outbound calls from Unified CM need to be EO and have to be via MTP (MTP required – Media Bypass)

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 30 Enterprise Voice Call Routing Multiple Site example – roaming user

Site 1

Site 2 Site Central Site1

WAN Site 2

S4B Front-End Mediation Server Pool Server Pool

Unified selects trunk to Lync based on called destination (+E.164 prefix) MTP (assumed) local to Lync client selected Alternate media IP definition in Lync trunk configured in same site as Lync client -> bypass activated Local media

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 31 Enterprise Voice Call Routing Multiple Site example – roaming user

Site 1

Site 2 Site Site 1 Site

Site 2

S4B Front-End Mediation Server Pool Server Pool

Unified selects trunk to Lync based on called destination (+E.164 prefix), but Lync client moved to other site MTP (assumed) local to Lync client selected Alternate media IP definition in Lync trunk configured not in same site as Lync client -> no media bypass Mediation server in media Media hairpins through central site BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 32 Enterprise Voice Call Routing Multiple Site example – roaming user

Site 1

Site 2 Site Site 1 Site

Site 2

S4B Front-End Mediation Server Pool Server Pool

False assumption about Lync client location could lead to even worse media path: Unified CM selects trunk with MTP local to (assumed) location of Lync client: Site 2 Lync rejects media bypass, because MTP not local to IP address of Lync client Mediation server in media path, Media hairpins through remote and central site

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 33 Supported Feature Enterprise Voice (Direct SIP) with Cisco Unified Communications Manager

• CLIP—calling (number) identification presentation • CONP—connected Name identification presentation

• CLIR—calling line (number) identification restriction • CONR—connected Name identification restriction

• CNIP—calling Name identification presentation • Hold and resume

• CNIR—calling Name identification restriction • Conference call

• Alerting Name • Audio Codec Preference List

• Attended call transfer • Call Park/Pickup(see limitation section)

• Early attended call transfer • Extend and Connect

• CFU—call forwarding unconditional • Shared Line on Cisco Endpoints

• CFB—call forwarding busy

• CFNA—call forwarding no answer

• COLP—connected line (number) identification presentation

• COLR—connected line (number) identification restriction

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 34 Required Configuration for Enterprise Voice (Direct SIP) with Cisco Communications Manager

Skype for Business: Cisco Unified Communications Manager: • Add Cisco UCM to Skype for Business Topology • SIP trunk security profile • Trunk Configuration • SIP profile • Route Configuration • Media resource group and media resource group list • Voice Policy and PSTN Usage Configuration • Assign media resource group list (MRGL) in the default device pool • Dial Plan Configuration • • Call Park range Configuration Region configuration • • Media Bypass Configuration Normalization script • • User Configuration SIP trunk to Skype for Business • • Client Configuration SIP and SCCP phones device configuration • Route Group, Route List and SIP Route Pattern Voice Mail • Route pattern to Skype for Business and Skype for Business call park range

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 35 Required Configuration for Enterprise Voice (Direct SIP) with Cisco Communications Manager

https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/interoperability-portal/cucm-skype-business-tls-appnote.pdf

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 36 Chat & Presence Interoperability Chat & Presence Interoperability A blast from the past… Business to Business Federation Within a Business Federation Inter Domain Federation Intra Domain Federation Direct SIP SIMPLE Federation Direct SIP SIMPLE Partitioned Intra Domain Federation

Cisco ASA TLS Proxy SIP SIMPLE Federation Chat & Calling (A/V) Federation VCS CPL

Direct XMPP Federation Chat & Calling (A/V) Federation VCS/Expressway Broker

Direct XMPP Federation with Cloud

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 38 Chat & Presence Interoperability You told us…

• “Why is interoperability so complicated?” • “Why do I need so many different boxes doing different things to achieve my goal?” • “Why does it have to be so expensive to do interoperability?” • “How can I seamless communicate with my business partners independent if they use Cisco, Microsoft or some other standards based solution?” • “How can I do a phased migration after an acquisition to a unified Cisco solution?” Things have changed.. • Microsoft deprecated support for XMPP Microsoft tested and supported only for https://technet.microsoft.com/en-us/library/jj205134(v=ocs.15).aspx • New vulnerabilities require new levels of security, TLS 1.0 no longer a viable option … we did listen!

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 39 Chat & Presence Interoperability A single architecture for Inter- and Intra Domain Federation Business to Business Federation Within a Business Federation Inter Domain Federation Intra Domain Federation Cisco Expressway SIP SIMPLE Federation with Microsoft Cisco Expressway Partitioned Intra Domain Federation

Cisco Expressway becomes the unified edge for all Cisco Expressway as centralized routing instance for B2B communications Microsoft Interoperability • Utilizing existing resources (B2B Video, Jabber MRA) • Streamlined configuration • Adds SIP SIMPLE capabilities on top of the already • Single point of contact for all Microsoft based existing XMPP federation services communications • Single routing instance for all B2B traffic • Removes requirement for 3rd party components (load • Provides chat & calling B2B capabilities to Microsoft balancers) Skype for Business on premise and Skype for Business • Integrates chat & calling federation inside the enterprise online (coexistence or migration)

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 40 Cisco Expressway Chat & Calling Interoperability How does it work?

• Microsoft uses a vendor specific dialect of SIP • Cisco Expressway has been enhanced to allow Search Rules to be based on SIP “dialect” and the type of traffic (chat/presence or audio/video) Cisco Expressway SIP SIMPLE Federation with Microsoft Complex Routing (chat & calling)

Expressway

MSFT SIP IM&P

MSFT SIP IM&P AV & Share MSFT AV & Share S4B Front End UCM IM/P Cisco Expressway SIP SIMPLE Federation with Microsoft Basic Routing (chat & presence) Standard SIP CMS AV & Share UCM

Expressway S4B Front End UCM IM/P • Symmetric routing • No certificate change required on Skype for Business Server • Multiple neighbour zones supported with up to 6 neighbours • Support Cisco UCM Multi Cluster deployment BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 41 Cisco Expressway Chat & Calling Interoperability The whole deal

Expressway-E Expressway-C UCM IM&P

CMS UCM

Single SIP based routing architecture provides:

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 42 Cisco Expressway Chat & Calling Interoperability The whole deal

Expressway-E Expressway-C UCM IM&P

CMS UCM

Single SIP based routing architecture provides: • Intra Domain Federation for Chat and Calling

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 43 Cisco Expressway Chat & Calling Interoperability The whole deal

Expressway-E Expressway-C UCM IM&P

CMS UCM

Single SIP based routing architecture provides: • Intra Domain Federation for Chat and Calling • B2B Federation with Microsoft Skype for Business premise

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 44 Cisco Expressway Chat & Calling Interoperability The whole deal

Expressway-E Expressway-C UCM IM&P

CMS UCM

Single SIP based routing architecture provides: • Intra Domain Federation for Chat and Calling • B2B Federation with Microsoft Skype for Business premise • B2B Federation with Microsoft Skype for Business online

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 45 Cisco Expressway Chat & Calling Interoperability The whole deal

Expressway-E Expressway-C UCM IM&P

CMS UCM

Single SIP based routing architecture provides: In addition: • Intra Domain Federation for Chat and Calling • Jabber and Cisco IP phone mobile remote • B2B Federation with Microsoft Skype for Business premise access • B2B Federation with Microsoft Skype for Business online

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 46 Cisco Expressway Chat & Calling Interoperability The whole deal

Expressway-E Expressway-C UCM IM&P

CMS UCM Expressway-E

Single SIP based routing architecture provides: In addition: • Intra Domain Federation for Chat and Calling • Jabber and Cisco IP phone mobile remote • B2B Federation with Microsoft Skype for Business premise access • B2B Federation with Microsoft Skype for Business online • B2B Federation with Cisco UCM solution

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 47 Cisco Expressway Chat & Calling Interoperability The whole deal

Expressway-E Expressway-C UCM IM&P

CMS UCM Expressway-E

Single SIP based routing architecture provides: In addition: • Intra Domain Federation for Chat and Calling • Jabber and Cisco IP phone mobile remote • B2B Federation with Microsoft Skype for Business premise access • B2B Federation with Microsoft Skype for Business online • B2B Federation with Cisco UCM solution • B2B Federation with 3rd party standard SIP endpoints

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 48 Cisco Expressway Chat & Calling Interoperability Features and use cases supported • Presence and Chat between Cisco and Microsoft users (internal or B2B)

• Instant Messaging Presence • Point-to-point Message Exchange (IM) CUCM IM/P maps the two different set of user’s states • Plain text IM format following the rules reported in the next slides • Typing indication • Basic • Note: Due to the proprietary nature of Microsoft server group chat functionality, partitioned intradomain federation does not support group chat between Jabber clients and Microsoft Lync/SfB clients With Cisco UCM IM&P 11.5.1 SU4 (planned January 31st 2018) temporary presence subscriptions fixed for Cisco Jabber clients

• Voice/Video calling between Cisco and Microsoft users, including bidirectional desktop sharing

• Smooth migration available to Cisco solution. Chat & Calling available during migration. Cisco provided tools allow buddy list migration

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 49 Presence State Mappings between Microsoft & Cisco

Lync/SfB Cisco Jabber Cisco Jabber Lync/SfB

Available Available Available Available

Busy Busy Busy Busy Do Not Disturb Busy Do Not Disturb Busy Be Right Back Away On the Phone Away Away Away Offline Offline In a call Away

Offline Offline

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50 Talking about Domains Recommended Deployment – Flexible Jabber ID (JID) Make the address the multimodal communication address Most Microsoft deployment user for SIP communication Mapped to msRTCSIP-primaryuseraddress attribute in Active Directory Required for deployments utilizing multiple distinct email/SIP domains in a single Cisco UCM IM&P cluster or multi-cluster environment Available in Cisco UCM IM&P with version 10.x or higher Cisco UCM Directory synchronization allows to select attribute email or msRTCSIP-primaryuseraddress. Recommendation for migration scenarios is the to user the later.

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 51 Talking about Domains Configuration steps for Flexible Jabber ID • Cisco UCM Directory LDAP Sync Statement, configure directory URI mapping

• Cisco UCM IM & Presence, configure Advanced Presence Settings

IM Address Schema – Directory URI Systems will automatically import all true domains configured in Active Directory Existing buddy lists will be migrated to new mail flexible JID format @ • Configure Cisco Jabber to use Flexible JID

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 52 A word on Contact Search Source for

• Cisco Jabber contact sources • Active Directory/LDAP • Cisco UDS (service provided by Cisco UCM) • Outlook personal contacts Cisco UCM UDS data source required for clients outside the corporate network using Mobile Remote Access (MRA), Active Directory source not available when outside Corp. network and not on VPN. New UDS Proxy service on Cisco UCM allows enhanced scalability beyond 160.000 directory items. Requires Cisco Jabber 11.7 or higher.

• Microsoft Skype for Business/Lync • Clients have local address book, created by nightly synchronization with AD by AddressBook service of Microsoft server (Lync or S4B) • Only includes users that are enabled for Lync/S4B, aka that have msRTCSIP-primaryuseraddress attribute set (we get to that in a second)

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 53 A word on Contact Search Microsoft Address Book service in the context of migration

• The Microsoft AddressBook service will only sync contacts that have attribute msRTCSIP- primaryuseraddress set • For migration screnarios the attribute is set for all existing Microsoft users • During migration when net new users are added to Cisco UCM (never enabled before for Microsoft Lync or S4B) msRTCSIP-primaryuseraddress must be set manually in Active Directory so these users are included into the AddressBook file that is to Microsoft clients

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 54 A word on Contact Search Temporary Presence Subscription When a users search for contacts (either contact source in Cisco Jabber or AddressBook for Microsoft the search results are displayed including a snapshot of the users presence. Since this is a temporary display of information, clients do not establish a full “subscription” for each of the users in the result list. This is called a temporary presence subscription.

Up until now this issue prevented Jabber or Microsoft users to see presence in the search results.

With Cisco UCM IM&P 11.5.1 SU4 this issue has been addressed for Cisco Jabber clients Cisco is actively investigating to provide a feature enhancement that will also solve this for Microsoft Lync and S4B clients – not yet committed to a specific release

This issue does not affect contacts that have been added to the buddy list of either clients. Full presence is displayed in that scenario.

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 55 Chat & Presence Interoperability Intra-Domain Federation

What we need to design and configure Collaboration Infrastructure considerations

Using basic (default) SIP routing – Cisco IM&P will route all requests to Microsoft that match any the configured domains Using advanced SIP routing – Cisco IM&P will verify that the destination user exist as a Microsoft (Lync or Skype for Business) user. Improves routing of mistyped/wrong SIP URIs

Advantages of the Expressway classification approach • Single TLS per subject UCM Expressway SIP broker Expressway traffic classification IM&P • Single TLS configuration S4B FE • Modification of S4B FE Inbound and Outbound requests routed certification optional via same paths Inbound and Outbound requests take (client/server role) different paths, makes configuration and troubleshooting more complicated

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 57 Configuration steps for Cisco Expressway classification Required Configuration Steps … (1/2) • Configure certificates on Lync and Cisco UCM Highly recommended to use CA based certificates on both systems (Enterprise CA) • Configure security parameters on Cisco UCM IM&P (ACL, TLS peer, TLS context)

Single neighbor, either single Cisco Expressway or Expressway Cluster • Turn on Partitioned Intra Domain Federation & Configure SIP static route(s) on Cisco UCM IM&P Single route per domain pointing to Cisco Expressway next hop • Configure security parameters on Microsoft Lync (Trusted Application, Computer, etc.)

Single destination, Cisco Expressway • Configure SIP static route(s) on Microsoft Lync

Single route per domain pointing to Cisco Expressway next hop

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 58 Configuration steps for Cisco Expressway classification Required Configuration Steps … (2/2) • Configure neighbor zones on Cisco Expressway One neighbor zone for UCM IM&P and Microsoft S4B • Configure search rules for specific traffic types

Route IM&P traffic from source zone S4B to Cisco UCM IM&P neighbor zone Route IM&P traffic from source zone Cisco UCM IM&P to neighbor zone S4B

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 59 Configuration steps for Cisco Expressway classification

CUCM IM&P Configuration (1/2) TLS Peer Subject Security Incoming ACL

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 60 Configuration steps for Cisco Expressway classification CUCM IM&P Configuration (2/2) Enable Partitioned Intra Domain Federation

TLS Context Configuration

SIP Route

Presentation ID © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 61 Configuration steps for Cisco Expressway classification Microsoft Skype for Business / Lync Server

Skype for Business (Lync) PowerShell commands

Create Route $TLSrouteno1 = New-CsStaticRoute -TLSRoute -destination -port 5061 –usedefaultcertificate $true -MatchUri Set-CsStaticRouteConfiguration –Route @{Add=$TLSrouteno1}

Create Application Pool New-CsTrustedAppicationPool –Identity -Registrar -Site 1 –TreatAsAuthenticated $true – ThrottleAsServer $true –RequiresReplication $false –OutboundOnly –false

Create Application New-CsTrustedApplication –ApplicationID expressway. -ApplicationPoolFQDN -port 5061

Publish and enable the topology in Microsoft Skype for Business

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 62 Configuration steps for Cisco Expressway classification Cisco Expressway configuration Cisco IM&P neighbor zone

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 63 Configuration steps for Cisco Expressway classification Cisco Expressway configuration S4B neighbor zone

Presentation ID © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 64 Configuration steps for Cisco Expressway classification Cisco Expressway configuration Search Rule From IM&P to S4B

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 65 Configuration steps for Cisco Expressway classification Cisco Expressway configuration Search Rule From S4B to IM&P

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 66 Instant Messaging and Presence Partitioned Intra Domain Federation – User Experience

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 67 Add Calling (Audio/Video) with Cisco Expressway classification and Cisco Meeting Server (CMS) Configuration steps for Cisco Expressway classification Required Configuration Steps add calling… • Cisco UCM Configure Secure SIP Trunk Profile Configure Secure SIP Trunk to Expressway Configure SIP Route Pattern for URI Routing Configure UCM Cluster Mixed Mode for End to End Encrypted Calls (SRTP) (not covered in the reference material) • Configure additional neighbor zones on Expressway for Cisco UCM and CMS • Configure search rules for routing of media (A/V) traffic • No additional configuration required on Microsoft Skype for Business/Lync

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 69 Configuration steps for Cisco Expressway classification Cisco UCM Configure Secure SIP Trunk Profile Configure Secure SIP Trunk to Expressway

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 70 Configuration steps for Cisco Expressway classification Cisco UCM

Configure SIP Route Pattern In a multi domain environment this step needs to be repeated for each SIP domain.

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 71 Configuration steps for Cisco Expressway classification Cisco Expressway CUCM Neighbor Zone

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 72 Configuration steps for Cisco Expressway classification Cisco Expressway CMS Neighbor Zone

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 73 Configuration steps for Cisco Expressway classification Cisco Expressway Search Rules A/V S4B - CMS

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 74 Configuration steps for Cisco Expressway classification Cisco Expressway Search Rules A/V CMS - UCM

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 75 Configuration steps for Cisco Expressway classification Cisco Expressway Search Rules A/V UCM - CMS

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 76 Configuration steps for Cisco Expressway classification Cisco Expressway Search Rules A/V CMS – S4B

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 77 Instant Messaging and Presence Partitioned Intra Domain Federation – Expressway classification User Experience Chat & Calling

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 78 What about external Federation Configuring steps for Cisco Expressway classification Partitioned Intra Domain Federation – with existing external B2B Federation

Both Solutions Cisco and Microsoft do support external Business to Business Federation via SIP SIMPLE SIP Federation is based on DNS SRV records. DNS SRV for a particular SIP domain can only be represented by one of the two solution – Highlander: “There can be only one!“

Domain company.com

S4B Edge Expwy-E

Who handles DNS SRV Records federation for DNS SRV Records company.com? _sipfederationtls._tcp. _sipfederationtls._tcp. Internet Standards based A/V external federation for _sip. and _sips as [email protected] well as XMPP federation can still be terminated to Cisco Expressway for B2B federation

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 80 Configuring steps for Cisco Expressway classification Partitioned Intra Domain Federation – with existing external B2B Federation External SIP B2B Federation during Migration S4B S4B Cisco Expressway Cisco UCM Cisco Jabber Client Front End IM&Presence

[email protected]

Alice on S4B initiates or receives communication with Cisco UCM Bob S4B@ external domain

DNS SRV Records _sipfederationtls._tcp.atlanta.com

Internet

[email protected]

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 81 Configuration steps for Cisco Expressway classification Partitioned Intra Domain Federation – with existing external B2B Federation External SIP B2B Federation during Migration

S4B Cisco Expressway Cisco UCM Cisco Jabber Front End IM&Presence

Traffic Classification [email protected]

Alice migrated to Jabber initiates communication Cisco UCM Audio/Video call with Bob S4B@ external domain DNS SRV Records _sipfederationtls._tcp.atlanta.com

Internet

[email protected]

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 82 Configuration steps for Cisco Expressway classification Partitioned Intra Domain Federation – with existing external B2B Federation External SIP B2B Federation during Migration S4B Cisco Expressway Cisco UCM Cisco Jabber Front End IM&Presence

Traffic Classification [email protected]

Alice migrated to Jabber Cisco UCM initiates chat communication with Bob S4B@ external domain DNS SRV Records _sipfederationtls._tcp.atlanta.com

Internet

[email protected]

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 83 Configuration steps for Cisco Expressway classification Partitioned Intra Domain Federation – with existing external B2B Federation External SIP B2B Federation during Migration S4B Cisco Expressway Cisco UCM Cisco Jabber Front End IM&Presence

Traffic Classification [email protected]

Bob S4B@ external domain Cisco UCM initiates chat communication with Alice migrated to Jabber DNS SRV Records _sipfederationtls._tcp.atlanta.com

Internet

[email protected]

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 84 Configuration steps for Cisco Expressway classification Partitioned Intra Domain Federation – with existing external B2B Federation External SIP B2B Federation during Migration Lync 2013 Cisco Expressway X8.8 Cisco UCM Cisco Jabber Front End IM&Presence

Traffic Classification [email protected]

Bob S4B @ external domain Cisco UCM initiates Audio/Video communication with Alice migrated to Jabber DNS SRV Records _sipfederationtls._tcp.atlanta.com

Internet

[email protected]

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 85 Configuration steps for Cisco Expressway classification Required Configuration Steps Partitioned Intra Domain Federation with existing external B2B Federation with Skype for Business Edge … • Cisco UCM Configure SIP Route Pattern for URI Routing • Cisco UCM IM&P Configure SIP direct Inter-Domain Federation Route Pattern for URI Routing • Configure search rules for routing Inter-Domain Federation traffic to S4B FE Search rule to route A/V traffic from Cisco UCM to CMS (transcoding) Search rule to route A/V traffic from CMS to Skype for Business Search rule to route IM&P traffic from Cisco UCM IM&P to Skype for Business • Utilizes existing Microsoft Skype for Business Edge configuration

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 86 Configuration steps for Cisco Expressway classification Partitioned Inter Domain Federation

External SIP B2B Federation during Migration – Configuration Cisco UCM Cisco UCM IM&P

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 87 Configuration steps for Cisco Expressway classification Partitioned Inter Domain Federation

External SIP B2B Federation during Migration – Configuration Cisco Expressway Search Rules

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 88 Configuration steps for Cisco Expressway classification Partitioned Intra Domain Federation – with existing external B2B Federation

External SIP B2B Federation during Migration - Configuration Microsoft Lync Server

SIP Federation Next Hop FQDN discovered through _sipfederationtls DNS SRV record

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 89 Chat & Presence Interoperability Intra-Domain Federation

Migration Instant Messaging and Presence Partitioned Intra Domain Federation – Migration...

Remember the Command Line Migration Tools ? ExportContacts.EXE, DisableAccount.EXE, DeleteAccount.EXE More Breaking News! Cisco UCM IM & Presence 11.5 Provides New GUI Based Migration Tool • Replaced 3 tools with one easy to use Windows application • Old tools had to be run on EVERY server in the deployment with multiple command line arguments • New application is run on the Front-End server. Will connect remotely to all of the other servers in the deployment . • Added progress bars/counters for each stage of the migration • Error handling / reporting has been greatly improved • Added support for validating user accounts, before they get migrated: • Validates that accounts exist and are enabled in Active Directory • Validates that accounts exist and are enabled on the LCS/OCS/Lync server

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 91 Instant Messaging and Presence Partitioned Intra Domain Federation – Migration... • Added validation at every step of the process • Does not let the admin continue without validating previous stages • Contextual tool tip help guides the admin through the process

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 92 Chat & Presence Interoperability Inter-Domain Federation Configuration steps for Cisco Expressway classification Full Business to Business / Inter Domain Federation using Cisco Expressway It is possible to utilize an existing Microsoft Federation environment, during migration After successful migration it is recommended to transfer the federation functionality completely to Cisco Expressway for all modalities and use cases • SIP B2B Federation with Microsoft cloud O365/Skype for Business online • SIP B2B Federation with Microsoft Skype for Business or Lync on premise • Standard XMPP Federation (Cisco or 3rd party) • Standard SIP Audio/Video (Cisco or 3rd party)

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 94 Configuration steps for Cisco Expressway classification Required Configuration steps Inter Domain Federation with Cisco Expressway … The following steps assume that during migration the previous example has been implemented • Configure search rules for routing Inter-Domain Federation traffic B2B Search rule to route A/V traffic from Cisco UCM to CMS (transcoding) Modify search rule to route A/V traffic from CMS to Expressway-E traversal zone Modify search rule to route IM&P traffic from Cisco UCM IM&P to Expressway-E traversal zone • Utilizes existing Expressway-C, Expressway-E traversal zone and DNS neighbor zone

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 95 Application Interoperability Application Interoperability Microsoft Office client and server side interoperability

Cisco Jabber 11.x support

Cisco Jabber Collaboration Solution

Fully integrated into Microsoft Office, on-premise or Office 365(*)

(*) Check Release Notes for supported Office 365 deployment models

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 97 Jabber 11.9 Integrations Office 2016 for Mac Cisco has been working with Microsoft to add include a presence API in office 2016 Mac. Jabber for Mac users now have presence and communication launch from office contact card

• Show Presence • Start Chat Session Office 2016 • Make Voice/Video Calls V15.33 and later

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 98 Jabber 11.9 Integrations Office 365 Outlook Web Client ... And customers using Office 365 Outlook Web access can also launch Jabber Chat and calls… Start Chat Chat icon can now launch Jabber Make a Call Click telephone numbers to call

No presence in OWA

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 99 Application Interoperability Functionality available at the application level • Cisco Jabber can integrate with the Microsoft Office suite Click-to-X (click-to-call, click-to-IM, click-to-conference) Presence light up of Microsoft Contact card Store Instant Messaging conversation history in Outlook/Exchange • Microsoft Exchange integration (Exchange on-premise and Exchange online) Calendar integration (client or server side) Unified Messaging integration – Cisco Unity Connection • Microsoft SharePoint integration (SharePoint on-premise and SharePoint online) Click-to-X (click-to-call, click-to-IM, click-to-conference) Presence light up of Microsoft Contact card

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 100 Application Interoperability Organizations moving commodity workloads to the cloud

PSTN B2B C2B

Internet

Collaboration services integrated with cloud based applications (i.e. Exchange, SharePoint) …while maintaining today’s required telephony functionality and PSTN access …while enhancing communication services with standards based interoperable business to business and consumer functionality

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 101 Application Interoperability Organizations moving commodity workloads to the cloud

PSTN B2B C2B

ProxyAddresses Internet AD attribute

EWS

• Active Directory proxyAddresses attribute required for Office integration and light up • Cisco Unity Connection messaging integration with Exchange Online via Exchange Web Services (EWS)

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 102 What about Cisco Spark? Cisco Spark Hybrid Service - Connected Calling

Cisco Cisco On-Premises & Collaboration Partner Hosted HCS Cloud

Call Service Connect - connects Cisco Spark & the enterprise phone system – so they behave as one

Your Spark app becomes an enterprise Provides voice and video interoperability between Jabber and Spark

User benefits: • Choice: use Jabber or Spark to call anyone without worrying about which you or the other person is using • One number: be reached on Spark, Jabber, or a deskphone. Choose to take the call on whichever suits you best at that moment • Reach everyone: call company extensions, PSTN numbers, Spark only users, and even video bridge numbers • Company dial plan: dial from the Spark app as you would from your deskphone - call PSTN numbers via enterprise phone system • Make the most of video assets: en-route to the office start a call on a mobile device and hand off to a room system when you arrive

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 104 Cisco Spark Hybrid Service - Connected Calling Preview, under evaluation When Cisco Spark User is enabled for Hybrid Call Service Connect Business to Business Calls are routed via the Enterprise (Cisco UCM, Expressway B2B)

Combining Cisco Spark Hybrid Call Service Connect with Expressway X8.9 Cisco to Microsoft B2B Federation, Cisco Spark Users can call Lync 2013, Skype for Business or Skype for Business Online Users (audio, video and two way screen sharing)

At this point there is no messaging interoperability available

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 105 Call Routing from Spark via Hybrid Service Configuration Outgoing to O365 Preview, under evaluation

Expressway Hybrid Services http REST Connectors

Cisco Collaboration SIP call from Spark (Hybrid) signaled to Enterprise CC Cloud Destination URI Bob@ AXL Routed through Spark Traversal Zone

SIP Route Pattern towards Expressway-C

Search Rule Search Rule Search Rule to to CMS to DNS Zone B2B/MRA Traversal Zone

Incoming Call Forwarding DNS lookup for _sipfederationtls._tcp. Outbound Call as Lync call Expressway-C

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 106 Call Routing from S4B (O365) to Spark via Hybrid Configuration incoming from O365 Preview, under evaluation

Expressway Hybrid Services http REST Connectors

Cisco Collaboration SIP call to Spark, destination cloud Cloud URI Alice@.ciscospark.com AXL Through Spark Traversal Zone

SNR / Hybrid Services

Search Rule Incoming Search Rule Search Rule Type MSFT SIP from CMS to UCM To B2B Traversal Zone to CMS

Incoming Call Forwarding DNS lookup for _sipfederationtls._tcp. Outbound Call as standard SIP Call Expressway-C

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 107 Call Routing from S4B (O365) to Spark via Hybrid Configuration Example Preview, under evaluation

SX20 Spark registered, paired via proximity calling S4B user, screen share SX20 visible on S4B

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 108 Call Routing from S4B (O365) to Spark via Hybrid Configuration Example Preview, under evaluation

SX20 Spark registered, paired via proximity calling S4B user, screen share from S4B visible on SX20

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 109 Summary Cisco Interoperability with Microsoft Many options to interoperate • Identify your requirements and select the right scenario for your environment  User experience  Technical feasibility  Complexity  Operational implications • Understand the pros and cons of the selected scenario • “Mileage” of certain functionalities might vary when applied to a real life environment …Media Bypass in multi site deployment • Thoroughly evaluate (PoC) • Cisco remains committed to support interoperability scenarios

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 111 How to get hands on experience?

Cisco UCM 11.5, Jabber 11.7+ and Expressway X8.9+ Traffic Classification hands on lab available via Cisco dCloud Go to http://dcloud.cisco.com (CCO login required)

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 112 • Please complete your Online Complete Your Online Session Evaluations after each session Session Evaluation • Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt • All surveys can be completed via the Cisco Live Mobile App or the Communication Stations

Don’t forget: Cisco Live sessions will be available for viewing on-demand after the event at www.ciscolive.com/global/on-demand-library/.

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public Continue Your Education

• Demos in the Cisco campus

• Walk-in Self-Paced Labs

• Tech Circle

• Meet the Engineer 1:1 meetings

• Related sessions

BRKCOL-2610 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 114 Thank you