Cisco Cisco Expressway
servers.
Expressway to Lync calls fail – Hardware Load Balancer
If the Lync environment has FEPs with an HLB in front, ensure that the Expressway is neighbored with the
HLB. If it is neighbored with an FEP directly, trust for Expressway will be with the FEP. Expressway will
send call requests to the FEP, but the FEP will record-route the message such that the ACK response should
be sent to the HLB. The ACK sent to the HLB gets rejected by Lync Server, so Lync clears the call after the
SIP timeout due to the FEP not seeing the ACK.
HLB. If it is neighbored with an FEP directly, trust for Expressway will be with the FEP. Expressway will
send call requests to the FEP, but the FEP will record-route the message such that the ACK response should
be sent to the HLB. The ACK sent to the HLB gets rejected by Lync Server, so Lync clears the call after the
SIP timeout due to the FEP not seeing the ACK.
(Calls from Lync client – registered to the FEP – to Expressway may still work.)
Media problems in calls involving external Lync clients
connecting via an Edge server
connecting via an Edge server
RTP over TCP/UDP
The Edge server supports RTP media over both TCP and UDP, whereas the B2BUA and standards based
video endpoints only support RTP over UDP. The Edge server and any firewalls that the Edge server may
pass media traffic through may need to be reconfigured to allow RTP over UDP as well as RTP over TCP to
be passed.
video endpoints only support RTP over UDP. The Edge server and any firewalls that the Edge server may
pass media traffic through may need to be reconfigured to allow RTP over UDP as well as RTP over TCP to
be passed.
ICE negotiation failure
This can usually be detected by the call clearing with a BYE with reason header “failed to get media
connectivity”.
connectivity”.
Video endpoints only support UDP media. ICE usually offers 3 candidates:
n
Host (private IP)
n
Server Reflexive (outside IP address of firewall local to the media supplying agent – B2BUA or Lync Client)
n
TURN server (typically the Edge Server/Expressway-E)
For ICE to work where an endpoint is behind a firewall, the endpoint must offer at least one publicly
accessible address (the Server Reflexive address or the TURN server address). This is used both for the
B2BUA to try and send media to, but also to validate bind requests sent to the Expressway-E’s TURN server
– bind requests are only accepted by the TURN server if they come from an IP address that is ‘known’.
accessible address (the Server Reflexive address or the TURN server address). This is used both for the
B2BUA to try and send media to, but also to validate bind requests sent to the Expressway-E’s TURN server
– bind requests are only accepted by the TURN server if they come from an IP address that is ‘known’.
If a Lync INVITE offers only host candidates for UDP, for example:
a=candidate:1 1 UDP 2136431 192.168.1.7 30580 typ host
a=candidate:1 2 UDP 2135918 192.168.1.7 30581 typ host
a=candidate:2 1 TCP-ACT 1688975 192.168.1.7 30580 typ srflx raddr 192.168.1.7 rport 30580
a=candidate:2 2 TCP-ACT 1688462 192.168.1.7 30580 typ srflx raddr 192.168.1.7 rport 30580
...only one UDP candidate (two lines, one for RTP and one for RTCP) and they are for the host (private,
presumably non-routable by Expressway address)
presumably non-routable by Expressway address)
and the B2BUA responds, for example:
a=candidate:1 1 UDP 2136431 84.233.149.125 56056 typ host
a=candidate:1 2 UDP 2136430 84.233.149.125 56057 typ host
a=candidate:4 1 UDP 1677215 194.100.47.5 60000 typ relay raddr 84.233.149.125 rport 56056
a=candidate:4 2 UDP 1677214 194.100.47.5 60001 typ relay raddr 84.233.149.125 rport 56057
...Host and Relay candidates are both offered.
Microsoft Lync and Cisco Expressway Deployment Guide (X8.5)
Page 56 of 71
Appendix 2: Troubleshooting