Escalate CCE PSTN Call to Conference with Skype for Business Online

-

Working with PSTN Conferencing in your Office 365 Skype for Business Online Tenant.


ID PSTN -> SfBOnlUsr call

Start and instant (Impromptu) Meeting or schedule a Online Meeting as usual from Outlook or your Client App.  After the meeting is escalate into ConfCall, the MCU SfB OnLine Server will send reinvite to MediationServerHybrid.

This is illustrated in the drawings below.

First we have a look into the outbound call to a PSTN user:

 

Next, we have a look into the inbound call from a PSTN user:


 

Configure online hybrid Mediation Server Settings

The setup process is curial and needs to be follow as below:
 
When a P2P call is escalated to a PSTN conference, the Skype for Business Online conferencing server will send an invite to the Cloud Connector Mediation Server. To ensure that Office 365 can route this invite successfully, you need to configure a setting in your online tenant for each Cloud Connector Mediation Server as follows:
1. Create a user in the Office 365 admin portal. Use any user name you want, such as “MediationServer1.”
Use the default SIP domain of Cloud Connector (the first SIP domain in the .ini file) as the user domain.
Do not assign any Office 365 licenses (such as E5) to the account you create. Wait for Office 365 AD sync to complete.
2. Start a tenant remote PowerShell session using your tenant admin credentials, and then run the following cmdlet to set the Mediation Server and Edge Server FQDN to that user account, replacing <DisplayName> with the Display Name of the user for the account you created:

Copy Set-CsHybridMediationServer -Identity <DisplayName>
-Fqdn <MediationServerFQDN> -AccessProxyExternalFqdn <EdgeServerExternalFQDN>



3. For Identity, use the Display Name of the Office 365 user account you created for this Mediation Server.

For MediationServerFQDN, use the internal FQDN defined for your Mediation Server.
For EdgeServerExternalFQDN, use the external FQDN defined for Edge Server Access Proxy. If there are multiple Cloud Connector PSTN sites, choose the Edge Server Access Proxy FQDN assigned to the site where the Mediation Server is located.
4. If there are multiple Cloud Connector Mediation Servers (multiple-site, HA), please repeat the previous steps for each of them.
Note:
https://technet.microsoft.com/EN-US/library/mt740651.aspx

Further conference expansion with Dial-In and Dial-Out from/to PSTN:

If another User should be called into the conference the Microsoft Office 365 PSTN Conferencing Bridge breakout is used.

 NOTE:
Dial-Out will be charged within your Office 365 Subscription.
If you have PSTN Calling activated, the outbound call with be deducted from your PSTN Calling minutes, or individually charged based on the Microsoft Destination minute pricings.

 Other Users calling into the conference with PSTN, use the Dial-In Bridge in Office 365 Skype for Business.


Author:

 

Comments

  1. UnknownJanuary 22, 2018 at 12:41 PM

    Hi,

    Trying to set the hybrid mediation server with Set-CsHybridMediationServer but I get "User not found".

    I created a user named MedServer01 in my tenant, only a cloud account.... then I run:
    Set-CsHybridMediationServer -Identity MedServer01 -Fqdn MedServer01.sfbccedom01.local -AccessProxyExternalFqdn pstn01.serveredge.com

    Does the account need to be in on-prem AD also? Or what could be wrong you think?

    Regards
    Rob

    ReplyDelete
    Replies
    1. Thomas PoettFebruary 1, 2018 at 9:26 AM

      Hi Rob,
      no, this account is a native Online User. Important is, that this user has the correct SIP Domain for URI/ User Login. The replication within Azure AD might take up to 24 hrs. Usually it's much faster.
      In your case, the "MedServer01" is not a user account, you need to use the format "user@sipdom.com"
      Cheers
      Thomas

      Delete
    2. FistandantilusFebruary 20, 2018 at 10:30 AM

      Hey Thomas,

      just a quick question: did you successfully implement this?
      I ask for the following reason:
      According to Technet you should create a online User without any license and with the default sipdomain of the CCE installation. If i try this i receive the following errormessage in powershell.

      PS C:\Users\max> New-MsolUser -UserPrincipalName "medsrv1@test.com" -DisplayName "medsrv1"
      New-MsolUser : You must provide a required property: Parameter name: FederatedUser.SourceAnchor
      At line:1 char:1
      + New-MsolUser -UserPrincipalName "medsrv1@test.com" -DisplayName "medsrv1"
      + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      + CategoryInfo : OperationStopped: (:) [New-MsolUser], MicrosoftOnlineException
      + FullyQualifiedErrorId : Microsoft.Online.Administration.Automation.RequiredPropertyNotSetException,Microsoft.Onl
      ine.Administration.Automation.NewUser

      so i decided to sync the user from onprem to the cloud and i can succesfully query that account!

      PS C:\Users\max> get-msoluser -UserPrincipalName medsrv1@test.com

      UserPrincipalName DisplayName isLicensed
      ----------------- ----------- ----------
      medsrv1@test.co medsrv1 False


      so everything looks actually fine right ? Now if i wanna setup the HybridMediationServer for that account i receive the following error message.

      PS C:\Users\max> Set-CsHybridMediationServer -Identity "medsrv1@test.com" -Fqdn medsrv1.cce_test.local -AccessProxyExternalFqdn edgepool.test.com
      User not found.
      + CategoryInfo : InvalidArgument: (:String) [Set-CsHybridMediationServer], ItemNotFoundException
      + FullyQualifiedErrorId : SessionStateException,Microsoft.Rtc.Management.AD.Cmdlets.SetHybridMediationServerCmdlet
      + PSComputerName : admin1e.online.lync.com

      I encountered this issue already on 3 installation in different tenants without any chance to resolve it.

      Any help would be much appreciated.

      Delete
    3. Thomas PoettFebruary 21, 2018 at 7:48 AM

      Hi it seem that you have an "_" in den DNS name. This isn't support in A Records. Only SRV Records are reserved for this. Could you try it without "_"/ underscore.

      Delete
    4. FistandantilusFebruary 21, 2018 at 9:40 AM

      Hi Thomas,

      sorry this was just an example there is no "_" in the DNS Names. Still hitting the same error. Infact in the 3 environments where i face this issues the CCE domains are voip.local, cce.local and s4bcce.local. :-(

      br H.

      Delete
    5. UnknownApril 16, 2018 at 2:03 PM

      Hi, Any further feedback on this request ? I also have this problem.

      Delete
    6. Thomas PoettApril 17, 2018 at 8:18 AM

      did you also check your DNS in regards of this reported issue. else please post a -verbose and logfile error extract

      Delete
    7. FistandantilusApril 18, 2018 at 8:45 AM

      Hey,

      it seems that something changed in February and since then the outlined Technet Steps are not working anymore. My understanding is that SfB cannot fin the userobject (not even if you use the GUID)

      My Workarround is as followed:
      - create user on Prem and sync.
      - assign a SfB license to the user just long enough to find the object with get-csonlineuser.
      - remove the license
      - Try to execute set-cshybridmediationserver and repeat that until you do not receive the error message that this user has a license assigned.
      - verify that the object has the correct settings.
      - after about 10 minutes verify again (takes some time until the license has been removed)
      - execute the set-cshybridmediationserver cmdlet again > voila it is working :)

      hope this helps a bit - lets wait when MS will fix it again ^^

      Delete

Post a Comment

Popular posts from this blog

How to hide users from GAL if they are AD Connect synchronized

-
Image
How to hide and un-hide users from Global Address List (GAL) in Exchange Online if they are AD Connect synchronized Hiding User from GAL isn't possible if those are synchronized form On-Premises Active Directory. The local AD is the leading system for all important attributes, like SMTP, UPN and hiding from GAL. Especially during a cross-tenant migration, you do not want to see not migrated user in the GAL. Those User aren't actively working until their cut-over day. Since the Exchange Online attribute  msExchHideFromAddressList s is an AD on-premises parameter, we have two possible ways hiding user in BME from GAL.   Modify the AD Connect for your teant with a custom rule, by using a extensionAttribute to set the HidefromGAL. In this rule, for users which have an entry in the extensionAttribute, hiding / un-hiding will be controlled by AD Connect This is the best option for Cross-Tenant Migration, if you run 2 or more AD Connect system We direct modif...
Read more

Cannot join external Lync Meeting: Lync Edge Server Single IP Address (Lync Edge Server Single IP Web Conferenceing Problem)

-
Image
Lync Edge Server FQDN and IP PORTS (Version 1.2, Update 26.11.2014) As we all know, we can configure Lync Edge Server in several way. 1) Single Edge Server with a SINGLE IP ADDRESS 2) Single Edge Server with MULTIPLE IP ADDRESSES (3x IPs) 3) Multiple Edge Server in a Pool, with MULTIPLE IP ADDRESSES (Zx 3 IPs) Regardless what we are going to configure, there are common / well-known TCP Port necessary making Lync work, which are: Access: Port: 443 and 5061 Conferencing: Port: 443 and (444) AV: Port: 443 (I have not listed other ports, e.g. STUN or the dynamic port range. This is not required for the topic discussed here) External FQDN with single IP address: What can we see here? If we are going to choose a single IP address, we would have TCP Port overlapping. Therefore the only way avoiding this is assigning other ports. Additionally we will also see and are reminded that Lync highly depends on DNS. If we have single IP, we must have use single, uniqu...
Read more

MFA with Guest Access and different tenants settings

-
Image
There is an update regarding MFA Multi Factor Authentication. If you are guest with a different Tenant, the MFA Settings are now reflecting the settings of all tenants in a different way. Each MFA setting is reflected and you can setup your MFA device as per tenant and the admin settings allow. Login to your Profile in Office 365/ Azure AD: https://account.activedirectory.windowsazure.com/r/#/profile or https://myapps.microsoft.com Go to your PROFILE: Sign in to https://myapps.microsoft.com Select your account name in the top right, then select profile. Select Additional security verification. If might be happen, your admin hast configured MFA, so you wouldn't see this menu. Simply switch the tenant to the guest tenant where you need to configure MFA. Once you go back to your profile and you will find the MFA device and other settings a usual:
Read more