Skip to main content
Biamp Cornerstone

Microsoft Skype for Business configuration for Tesira using SageVue

Biamp’s Tesira VoIP products allow Biamp Tesira digital signal processors to make and receive phone calls over many different Voice-over-IP (VoIP) systems that adheres to the Session Initiation Protocol (SIP) standard. Microsoft Skype for Business systems make use of an expanded version of SIP called MS-SIP or Microsoft SIP Extension.  This document details the steps required to configure Biamp’s Tesira VoIP products to connect to a Microsoft Skype for Business (SFB) system using SageVue management software

Preliminary information

System support

The Tesira SVC-2 and TesiraFORTÉ endpoints have been tested against the following versions from Microsoft:

  1. Microsoft Lync 2010
  2. Microsoft Lync 2013
  3. Microsoft Skype for Business (SFB)

It should be noted that the screenshots used in this tech note were take from a SFB server. While older Lync versions use the same setup process the user interface layout may vary slightly. 

Note: Office 365 implementations of Skype for Business are not supported by Tesira VoIP endpoints. 

Microsoft license requirements

While full support for 3rd party endpoints is available in SFB out of the box, using these services requires you to purchase Microsoft license agreements for each line in use.  The following is a list of Client Access Licenses (Cal's) that are required per line of a Tesira VoIP endpoint.  Note that each Tesira VoIP endpoint can support up to two individual lines. Each line being used requires a set of the three licenses listed below: 

  1. Standard User Cal
    • A base license for all SFB clients
  2. Enterprise User Cal
    • A license required for all VoIP endpoints
  3. Plus User Cal
    • A license to access some advanced features of SFB. 

There are no licenses required on the Tesira side of the exchange. 

Microsoft configuration

First, we'll focus on setting up the Microsoft Skype for Business software.

Active Directory settings

A new user must be added to Active Directory for the Tesira VoIP device.  Each Tesira VoIP endpoint supports up to two user identities, and multiple endpoints may be used within a single system.  The steps below will focus on a single user account, however if multiple user are required, simply repeat as necessary.
 
  1. Open Active Directory Users and Computers from Administrative Tools.
Admin Tools Screenshot
  1. Right Click on Users and create a New User.
New User Selection
  1. Enter the Name Settings for the new User.
  2. Create a User Logon Name. Note that Tesira uses the username entered into the "User logon name (pre-Windows 2000)" field.

(This name must be 20 characters or less)

  1. Select the Domain that the User will belong to.
  2. Take note of all of these parameters as they will be needed in the Tesira VoIP Endpoint setup.
  3. Click Next.
New Object - User
  1. Create and confirm a password for the User.
  2. Ensure the "Password never expires" checkbox is selected.
  3. All other settings can be disabled.
  4. Click Next.
New Object - User Password
 

Skype for Business Server settings

  1. Open the Skype for Business (SFB) server configuration page.
  2. Select Users.
  3. From the Enable Users pull down menu, choose Enable Users. 

Enable User Pulldown

  1. Under the Users dialog click the Add button.
Add User SFB Server.jpg
  1. Click the Find button in the Select from Active Directory window to display the current users.
  2. Select the user that was created in the Active Directory setup steps above. 
  3. Click OK.
Select From AD.JPG
  1. Assign the user to a pool
  2. Under "Generate user's SIP URI" select "Specify a SIP URI". 
    • Enter the following: "sip:xxxxx@domain".  In this instance the xxxxx represents the user name of the contact and the domain is the URI it is to be associated with. 
  3. Under the Telephony field select Enterprise Voice. 
  4. Under the Line URI enter "tel:xxxxx" In this instance the xxxxx represents the phone extension number to be assigned to the user. 
  5. Select a Dial Plan Policy.  Note that if you plan on not using a Dial Plan, or if you would like the user account to utilize the Pool, Site, or Global Dial Plan you can leave this setting a the default "Automatic".  If you would like to choose a custom User Dial Plan select that dial plan from the pull down list.  If the intention is that the Tesira VoIP endpoint should use Lync Normalization Rules as part of the Dial Plan settings please visit this article
  6. All other user settings may remain at default or be adjusted to align with whatever custom parameters are necessary in the particular system. 
  7. Click Enable at the top of the screen. 
New User Selection.v2.JPG
  1. The resultant user list should show the new user in an enabled state. 

Result of User Setup

Security

SFB supports three different mechanisms for device authentication, however Tesira supports only one of these three.  The following steps ensure that a mutually support service is enabled. 

  1. In the SFB server select Security.
  2. Select the security scheme that is used for the Registration Pool the User was added to in the SFB user setup steps above. 
  3. Edit the scheme.

Note: In many circumstances the system may be set to only utilize the default "Global" security group. 

Security List
  1. Ensure that at minimum the "Enable Integrated Windows authentication" box is checked. 
SFB Security Selections.JPG

Tesira configuration

Next, we'll focus on setting up the Tesira configuration to match the settings that were used in SFB.

Accessing VoIP settings in SageVue 

 

sageVueMainMenu.png

SageVueInterfaceSelect.png

SageVueNetwork.png

  1. Open a browser and login to your Sagevue webpage.
  2. Navigate to "Devices" on the right side of your browser.
  3. Click on the device description of a device running a configuration that has a VoIP interface
  4. Navigate to the VoIP configuration tab. (If you cannot access the VoIP settings make sure your account has read/write permissions for VoIP settings.  More information on user roles can be found on the online SageVue help page.)
  5. Select the correct interface that adjustments are going to be made on.
  6. If you'd like to set the same settings on all VoIP interfaces within this device, enable the "Configure all VoIP cards in this device" option. Note that only fields highlighted in yellow can be updated on multiple endpoints at once.

Network Configuration 

 

  1. Under the Network region of the screen, set “VLAN Tagging” to “Enabled” if your VoIP network uses a tagged VLAN.  If the network uses an untagged VLAN or no VLAN, leave this value as “Disabled”.  If VLAN is enabled, enter the correct VLAN ID.
  2. Leave “DHCP” set to “Enabled” if the Tesira endpoint will obtain an IP address automatically from a DHCP server.  Otherwise, set “DHCP” to “Disabled”, and manually enter an appropriate static IP Address, Subnet Mask, and Gateway for the Tesira.

 

Protocol information

  1. SFBSageVue.pngSelect your line, Line 1 shows up in a dropdown box, each slectcable VoIP card can use up to two lines.
  2. Set your Proxy Vendor field to "Lync"
  3. In the SIP User Name field, enter the SIP User Name portion of the SIP URI  created in SFB User Dialog page.
  4. In the SIP Domain field enter the Domain portion of the SIP URI used in the SFB User Dialog page.  Note that the @ symbol does not need to be entered. 
  5. Enter the "User Log In Name (Pre Windows 2000)" created in the Active Directory User Page. (Note that this field must be 20 characters or less. This is a Windows limitation.)
  6. In the User Logon Password field enter the Password used in the Active Directory Password Page
  7. In the NetBIOS field, enter the NetBios Domain located in the Active Directory User Page (the field is located to the left of the "User logon name (pre-Windows 2000)" field). Note that the "\" (backslash) symbol should be omitted from the Tesira configuration.           
                      
           
  8. Enter the Front End Address for the SFB server. There are two methods that can be used to set the Proxy Address:
  • Entering the IP Address of the SFB server in the Front End Server Address field. 

SFBFront_End.png

  • Entering the URI of the SFB server in the Front End Server Address field.  When the domain is used the Tesira endpoint will make use of one of the following three mechanisms to locate the SFB. 
  1. SRV Record lookup
  2. NAPTR Record lookup
  3. DNS Record Lookup

The Tesira device will try each method in order and the first to receive a response will be used.  Note that in order to make use of these settings the Front End Server Port must be set to 0. 

SFBFront_EndNAPTR.png

When changing the proxy vendor to "Lync" in SageVue the transport type is changed to TLS. TLS is the default transport protocol for SFB and will likely be used because of its encryption support for SIP

The default setting for TLS in Tesira will encrypt all SIP data, but accept verification of any server certificate received.  If you need to edit this transport type to TCP or change the certificate settings then the VoIP webpage needs to be used.  Changing the transport type is not possible through SageVue

Note: TCP is a supported alternative to TLS in SFB, but it must be manually enabled.  If registration issues occur between SFB and Tesira, temporarily configuring the system in TCP mode would allow a Wireshark trace to capture unencrypted data for troubleshooting.  Additional troubleshooting can be done by downloading the Logs and saving them in the default .uccapilog format.  These logs can be sent to Biamp Technical Support for review. 

 

  1. If you are configuring a second line, switch to "Line 2 Setup" and repeat steps 2-8
  2. All other settings can remain at their default values in most cases. 
  3. Once all settings have been added, save the changes by clicking "Update".  A window will pop up indicating that the changes will be written to the Tesira VoIP endpoint