External Firewall Requirements Note: Minimum Ports used, refer TechNet for recommended option. Outgoing Traffic from Edge Source IP Destination IP Protocol Destination Port Port Description CCE Edge External interface IP 172.16.50.118 SFB Online IPs and FQDNs *.lync.com TCP 5061 CCE to SIP Traffic CCE Edge External interface IP 172.16.50.118 TCP 80 FQDN of your cert provider CCE Edge External interface IP 172.16.50.118 External DNS (8.8.8.8) UDP 53 DNS Resolution CCE Edge External interface IP 172.16.50.118 External DNS (8.8.8.8) TCP 53 DNS Resolution CCE Edge External interface IP 172.16.50.118 SFB Online IPs and FQDNs *.lync.com TCP 443 For Audio and Video Session with SFB Online CCE Edge External interface IP 172.16.50.118 SFB Online IPs and FQDNs *.lync.com UDP 3478 For Audio and Video Session with SFB Online Incoming Traffic to Edge Source IP Destination IP Protocol Destination Port Port Description SFB Online IPs and FQDNs *.lync.com CCE Edge External interface IP 172.16.50.118 TCP 5061 to CCE SIP Traffic SFB Online IPs and *.lync.com CCE Edge External interface IP 172.16.50.118 TCP 443 For Audio and Video Session with SFB Online SFB Online IPs and FQDNs *.lync.com CCE Edge External interface IP 172.16.50.118 UDP 3478 For Audio and Video Session with SFB Online
SIP Domains Domain(s) registered on O365. Support multiple domains separated by space. First domain is the default used radiancecommslab.com Virtual machine domain name Domain name for the internal components of Connector. This domain must be different from the production domain. The name must be the same across all Cloud Connector appliances. Name in .ini file: “VirtualMachineDomain” sfbhybridtest.local Cloud Connector domain controller name Name of the domain controller. Name in .ini file: “ServerName” AD Connector domain controller IP/subnet mask IP address of the domain controller. Name in .ini file: “IP” 172.16.40.161 O365 Online service FQDNs Must be the default in most cases for the world-wide O365 instance. Name in .ini file: “OnlineSipFederationFqdn” sipfed.online.lync.com SiteName Skype for Business site name; for example, Seattle. Name in .ini file: “SiteName” For Release 1.4.1 and later, site name must be different for each site and the name must match the PSTN site, if it exists, defined in Office 365. Note that PSTN sites will automatically be created when registering the first appliance in a site. RadianceLAB HardwareType Release 1.4.1 and Type of hardware. The default value is Normal. You can also set to Minimum. Minimum Country Code Country Code for Dialing. Name in .ini file: “CountryCode” SG City City (Optional). Name in .ini file: “City” SG State State (Optional). Name in .ini file: “State” SG
Switch name for internal network Name for switch that will be used for the internal Connector network. In most cases the default suggested value can be used. Name in .ini file: “CorpnetSwitchName” under “Parameters for a pool of VM network SfB CCE Corpnet Switch Switch name for external network Name for switch that will be used for the external Connector network. In most cases the default suggested value can be used. Name in .ini file: “InternetSwitchName” under “Parameters for a pool of VM network SfB CCE Internet Switch Default Gateway for internal network This gateway must provide access to the Internet (Internet also requires setting the DNS server) and will be configured on internal interfaces of Cloud Connector components. Name in .ini file: “CorpnetDefaultGateway” under “Parameters for a pool of VM network 172.16.40.1 Default Gateway for external interface of Edge component Will be configured on external interface of Edge component. Name in .ini file: “InternetDefaultGateway” under “Parameters for a pool of VM network 172.16.50.1
Voice Gateway 1 Protocol for SIP Traffic TCP or TLS. TCP Voice Gateway 2 Protocol for SIP Traffic (copy this row if you have more than 2 gateways) TCP or TLS. External port range for traffic to and from Edge component TCP/UDP port range for media traffic to and from external interface of edge. Must always start from 50 000. Refer to “Ports and Protocols” for more information. 50000 - 59 999 Media port range to communicate to/from the Mediation component via the internal firewall UDP port range that the Mediation component will use to communicate to clients and gateways (recommendation 4 ports per call). port range to communicate to/from Skype for Business client via internal firewall For planning purposes, cannot be changed. Ports need to be opened in the internal firewall to communicate between Skype for Business clients within the internal network and with the Mediation component. 50 000- 50 019 Public Certificate password Must be provided in the script. Passw0rd Safe Mode Administrator Password Version 1.4.2 only Safe mode administrator password for internal CC domain. Cloud Connector Domain Administrator password Version 1.4.2 only Password for Cloud Connector Domain Administrator (different from your production domain). User name is Administrator. You cannot change the user name. Virtual Machines Administrator Password Version 1.4.2 only Used to configure management network during the deployment. User name is Administrator. You cannot change the user name. CABackupFile Version 2.0 and Used for saving the Certification Authority Service from the Active Directory server to a file when deploying multiple appliances in a Cloud Connector site. Be sure to use the same password