Configure Cisco ISR to Support Lync

Supported Cisco ISR
Cisco ISR 2811 - 12.4(24)T
Cisco ISR 3845 - 12.4(15)T3

Note : I tested on Cisco 2811 with12.4(13r)T which worked Perfectly.

There are 2 settings to be done.

1. Configure the Router

dial-peer voice 301 voip
destination-pattern +3[7][0-9]
session protocol sipv2
session target ipv4:10.2.1.30:5068 --> Mediation Sever IP
session transport tcp
dtmf-relay rtp-nte
codec g711ulaw
fax protocol none
no vad

Note :5068 is default port in Lync Mediation. If you change in Mediation you must restart the server and change in the router also.

2.Disable SIP Refer in Lync
In Control Panel->Voice Routing->Trunk Configuration
Clear "Enable refer support"

Polycom HDX 7000 Configuration for LYNC

Starting with software version 3.0.0.2 native SIP registration with Lync Server 2010 is now supported.

All that is required to register an HDX7000 to Lync is to populate the SIP Settings configuration with the credentials of a Lync enabled Active Directory user account.

You can log in to your HDX 7000 via browser and under admin settings go to Network.. IP Network.. and SIP Settings.

Update the Setting as Below.
Sip Domain :abc.com
AD :abc.ad
Lync Front end :lync-fe



Note
Check is that 128-bit encryption is not enforced on the Windows 2008 R2 Lync Server.

*On the Lync Server itself open the Local Security Policy and browse to Security Settings > Local Polices > Security Options.
*Edit the policy Network Security: Minimum session security for NTLM SSP based (including secure RPC) servers.
*Uncheck the Require 128-bit encryption setting to enable 'no minimum' as the configured behavior

*Restart LYNC Front end Service

Godaddy Certificate for LYNC

GoDaddy certificates functions Perfectly with Lync 2010.
You have to Buy a UCC certificate from Godaddy in order to achieve this.

Will Take up a Scenario,

You have configured 3 Public IPs to your Lync EDGE Server.

203.111.222.179 - sip.abc.com
203.111.222.180 - webconf.abc.com
203.111.222.181- av.abc.com


Your Reverse proxy Details are :meet.abc.com, dialin.abc.com, webexternal.abc.com

Now We are going to request a Single Godaddy UCC Certificate which should be as below.

SN : sip.abc.com
SAN : sip.abc.com, webcon.abc.com, meet.abc.com, dialin.abc.com, webexternal.abc.com