1

New setup Lync 2010 (i.e. OCS 2010). I have serious problems getting my edge system going.

Internally things work fine. Externally I am stuck. I have used the tester at https://www.testocsconnectivity.com/ and it also fails.

NOTE: I use the domain xample.com / xample.local here just as example.

Here is the setup. I have 2 internal hosts (lync.xample.local, edge.xample.local). edge.xample.com is also correctly in dns. and points to the edge.xample.local external assigned ip address (external interface).

Externally, I have the following dns entries:

  • edge.xample.com
  • _sip._tcp -> edge.xample.com 443
  • _sipfederationtls._tcp -> edge.xample.com 5061
  • _sipinternaltls._tcp -> lync.xample.local 5061
  • _sip._tls -> edge.xample.com 443

My problem is that the ocs connection test always ends up trying to contact lync.xample.local (i.e. the internal address) when connecting to [email protected]. The error is:

Attempting to Resolve the host name lync.xample.local in DNS. This shows me it clearly manages to connect to SOMETHING, but it does either fall through to the _sipinternaltls._tcp entry, OR it does get that internal entry wrongly from the edge system.

  • Am I missing some entries or have some wrong?

1 Answer 1

1

If the _sipinternaltls._tcp record is resolvable, the Lync client will alway try to connect to it.

You need a 'split horizon' aka 'split brain' DNS, where you have one set of records visible internally, and one set of records visible to everyone else.

2
  • I have nothing against it trying to connect to _sipinternaltls, AS LONG AS IT GOES ON TRYING THE EXTERNAL _sip WHEN THAT FAILS. This is what OCS did. There was simply no need for split DNS there becasue the client, failing to find the internal server, would go on to the external one. With Lync, it seems to not even try to get the external one.
    – TomTom
    Mar 7, 2011 at 7:29
  • 1
    As annoying as it is, Froosh is right -- Lync's only supported configuration now is split-brain DNS which I admit is a nasty hack. You might be able to get away with pushing registry keys via GPO that sets manual provisioning with the right server names... I'm not sure of the feasability of that. Worth investigating if it's a showstopper. May 9, 2011 at 15:32

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .