The external interface of the A/V Edge service is used for allocating resources that enable A/V sessions between internal and external users. This includes A/V conferences and point-to-point calls.
You can use the procedures in this section to configure the external interface of an A/V Edge service, including the following:
- Configure the IP address and FQDN of the external interface of
the A/V Edge service.
- Configure the TCP port and media port range used for the
external interface of the A/V Edge service.
No certificate is required for the external interface of the A/V Edge service, but an A/V user authentication certificate is required, as described in Configuring the A/V Authentication Certificate.
Important: |
---|
If you change any of these settings, ensure that you also
update the DNS records to point to your A/V Edge service, as
appropriate. For details about configuring DNS records, see
|
To configure the IP address and FQDN of the external interface of the A/V Edge service
-
On the A/V Edge service, open Computer Management.
-
In the console tree, expand Services and Applications, right-click Office Communications Server 2007 R2, and then click Properties.
-
On the Edge Interfacestab, under A/V Edge Server, click Configure.
-
In the A/V Edge Serverdialog box, under External Interface, do the following:
- In the
IP addressdrop-down list box, click the IP address for the
external interface. External users connect to this IP address to
participate in A/V sessions. The IP address should be publicly
routable.
- In
FQDN, type the FQDN of the external interface of the A/V
Edge service.
- In the
IP addressdrop-down list box, click the IP address for the
external interface. External users connect to this IP address to
participate in A/V sessions. The IP address should be publicly
routable.
-
If you have made any changes, restart the Office Communications Server Audio/Video Edge service and the Office Communications Server Audio/Video Authentication service. When you replace an expiring internal interface certificate, if the subject name and all other certificate settings of the new certificate except the expiration date are identical to the settings of the expiring certificate, it is not necessary to restart the service.
To configure the TCP port and media port range used for the external interface of the A/V Edge service
-
On the Edge Server, open Computer Management.
-
In the console tree, expand Services and Applications, right-click Office Communications Server 2007 R2, and then click Properties.
-
On the Edge Interfacestab, under A/V Edge Server, click Configure.
-
In the A/V Edge Serverdialog box, under External Interface, do the following:
- In
TCP port, type the port used for TCP traffic on the external
interface of the A/V Edge service. External or remote users connect
to this port to participate in A/V sessions in your organization.
The default is port 443.
- In
Media port range, type the beginning and ending number to
specify the range of ports available on the external interface of
the A/V Edge service to send A/V conferencing traffic (such as
50000 to 59999). The minimum number of ports in the range is 100.
- To allow the external IP address to be translated from a public
IP (NAT), select the
External IP address is translated by NATcheck box. This
option is valid for a single A/V Edge service deployment. Multiple
A/V Edge services that are deployed behind a load balancer do not
support network address translation (NAT).
- In
TCP port, type the port used for TCP traffic on the external
interface of the A/V Edge service. External or remote users connect
to this port to participate in A/V sessions in your organization.
The default is port 443.
-
If you have made any changes, restart the Office Communications Server Audio/Video Edge service and the Office Communications Server Audio/Video Authentication service. When you replace an expiring internal interface certificate, if the subject name and all other certificate settings of the new certificate except the expiration date are identical to the settings of the expiring certificate, it is not necessary to restart the service.