A10 Networks AX Series Quick reference guide

Deployment Guide
AX Series with
Microsoft Office Communications Server

T
able of Contents
Deployment Guide for Microsoft Office Communications Server 2007
DEPLOYMENT GUIDE
AX Series with MicrosoOffice Communicaons Server
Introducon......................................................................................................................... 1
Prerequisites & Assumpons ................................................................................................. 1
Enterprise Deployment Example............................................................................................ 2
Configuring AX for HTTPS (444) port on MicrosoOffice
Communicaons Server 2007................................................................................ 3
Configuring HTTPS Health Monitor........................................................................................ 3
Configuring Real Servers for OCS ........................................................................................... 4
Service Group Configuraon.................................................................................................. 6
Templates Configuraon........................................................................................................ 7
Configuring HTTP Template ........................................................................ 7
Configuring TCP Proxy Template................................................................. 8
Imporng of SSL Cerficate ........................................................................ 9
Configuring SSL Server Template .............................................................. 10
Configuring SSL Client Template ............................................................... 11
Configuring Virtual Server for port 444 (HTTPS).................................................................. 12
Configuring AX for SIP (5061) port on MicrosoOffice
Communicaons Server 2007.............................................................................. 14
Configuring Real Servers for OCS ......................................................................................... 14
Service Group Configuraon................................................................................................ 15
Template Configuraon ....................................................................................................... 16
Configuring TCP Template......................................................................... 16
Configuring Source IP Persistence Template............................................. 17
Configuring Virtual Server for port 5061 (SIP)...................................................................... 18
Summary and Conclusion ....................................................................................... 20

Performance by Design
1
Deployment Guide for Microsoft Office Communications Server 2007
Introducon
This deployment guide contains configuration procedures for AX Series server load balancers to support
Microsoft Office Communications Server 2007 (OCS).
OCS is the first Microsoft product to combine enterprise-ready IM (instant messaging), presence, confer-
encing, and VoIP (Voice over IP) telephony in a fully integrated unified communications solution. Office
Communications Server 2007 provides richer presence capabilities, rich multimedia experiences that
include data collaboration, group IM, audio and video, and multiparty audio conferencing, and improved
deployment and management than its predecessor, Microsoft Office Live Communications Server 2005.
For more information on OCS, visit:
http://office.microsoft.com/en-us/communicationsserver/default.aspx
The AX Series with its Advanced Core Operating System (ACOS) has been designed specifically for ap-
plications such as OCS, providing better robustness in failover situations, load balancing VoIP users’ ses-
sions for better performance and scalability, offloading processing for security, and performing intelligent
load sharing for Web based clients’ access for OCS services.
Prerequisites & Assumpons
A10’s AX platform should be running software version 2.0 or later.• It is assumed that users have some basic configuration familiarity with both AX as well as OCS• administration.
The AX can be configured in one armed mode or routed mode.•

Performance by Design
2
Deployment Guide for Microsoft Office Communications Server 2007
The configurations that are in this deployment guide can be used for OCS setups and topologies for cli-
ents’ access using a HTTP Web browser for OCS services, and for VoIP services of OCS based on the
SIP configuration.
Enterprise Deployment Example
For High Availability Enterprise deployment supporting mission-critical IM and conferencing internally
as well as providing external access, the following Microsoft’s OCS reference topology is used as an
example.
This reference topology is well positioned to scale if the need for external access becomes more critical.
To scale, you add additional computers that are running the same server roles and connect them to the
AX load balancer.
Figure 2.1 Office Communications Server Reference Topology
Figure 2.1 Office Communications Server Reference Topology

Performance by Design
3
Deployment Guide for Microsoft Office Communications Server 2007
The configuration steps in this document are based on AX Series Software Release 2.4 and Microsoft
Office Communications Server 2007 Enterprise Edition.
Configuring AX for HTTPS (444) port on MicrosoOffice
Communicaons Server 2007
To configure AX for Microsoft Office Communication Server 2007, you need to configure the following
steps on AX.
Configure HTTPS Health Monitor• Configure OCS (Office Communications Server)• Configure Service Group• Configure Template• Configure Virtual Server•
Configuring HTTPS Health Monitor
In these steps we will configure the HTTPS health check for port 444 on OCS.
To configure HTTPS health monitor:
1. Select Config Mode > Service > Health Monitor
2. Click Add
3. On the Health Monitor tab, enter a name for the monitor in the Name field. In this example, we type
“OCS-HTTPS-HM”
4. In the Method section, select HTTPS from the Type drop-down list
5. In the Port field, port number enter “444”
6. Configure optional fields as required for your deployment. In this example, the default health monitor
settings are used
7. Click OK to finish configuration of the health monitor. The health monitor appears in the health monitor
table

Performance by Design
4
Deployment Guide for Microsoft Office Communications Server 2007
Figure 2.2 Health Monitor Configuration
Figure 2.2 Health Monitor Configuration
Configuring Real Servers for OCS
In this step we configure Microsoft OCS real server with service port 444. We configure HTTPS health
monitor on the service port.
To configure a real server:
Select1. Config Mode > Service > SLB
Select2. Server on the menu bar
Click3. Add. The General tab appears
In the4. Name field, enter a name for the server. In this example, the name is “OCS-07”
In the5. IP Address field, enter the IP address of the server. In this example we type
“192.168.111.1”
In the6. Health Monitor drop-down list, leave the default health monitor for Layer 3, which is
ping to the server’s IP address

Performance by Design
5
Deployment Guide for Microsoft Office Communications Server 2007
Figure 2.3 Real Server Configuration
Figure 2.3 Real Server Configuration
In the7. Port field, enter the number of the service port on the real server. In this example, the
port number is “444”
In the8. Health Monitor drop-down list for the port, select the previously configured HTTP health
monitor “OCS-HTTPS-HM”
Figure 2.4 Real Server Port Configuration (Continuation)
Figure 2.4 Real Server Port Configuration (Continuation)
Click9. Add to add the port to the port list for the server
Click10. OK. The real server appears in the server table
Repeat this procedure for each of the Microsoft Office Communications servers11.

Performance by Design
6
Deployment Guide for Microsoft Office Communications Server 2007
Service Group Configuraon
To configure a service group:
Select1. Config Mode > Service > SLB
Select2. Service Group on the menu bar
Scroll down to click3. Add. The Service Group tab appears
In4. Name field, enter name of service group. In this example, the name is “ocs-https”
In the5. Algorithm drop-down list, select the preferred load-balancing method. You can control
the load on each server by selecting the appropriate type of load balancing methods. For this
configuration, Round Robin is used
In the Server section, select a configured real server from the6. Server drop-down list
In the Port field, enter the port7. “444”
Click8. Add. Repeat steps 6-8 for each real server
Click9. OK. The new group appears in the service group table
Figure 2.5 Service Group Configuration
Figure 2.5 Service Group Configuration

Performance by Design
7
Deployment Guide for Microsoft Office Communications Server 2007
Template Configuraon
HTTP Template• TCP-Proxy Template• Client SSL Template• Server SSL Template•
Configuring HTTP Template
Configuring HTTP Template
Select1. Config Mode > Service > Template
Select2. Application > HTTP from the drop down menu bar. The Template >> HTTP >> List
page appears
Click3. Add. The Template >> HTTP >> Create page appears
Enter a name for the template in the4. Name field. In our example we type “OCS-HTTP”
Select or enter values for the template options you want to use. In this example, the default5. values are used for the remaining options
Click6. OK to finish configuration and the template now appears in the HTTP template list
Figure 2.6 HTTP Template Configuration
Figure 2.6 HTTP Template Configuration

Performance by Design
8
Deployment Guide for Microsoft Office Communications Server 2007
Configuring TCP Proxy Template
Configuring TCP Proxy Template
TCP-proxy templates control TCP stack settings such as the idle timeout for TCP connections. We will
configure this template on a virtual server port later in the deployment guide.
To configure a TCP-Proxy template:
Select1. Config Mode > Service > Template
Click2. TCP Proxy on the top menu bar
Click3. Add to configure new template
In the4. Name field, enter a name for new template. In this example we type “OCS-TCP-Proxy”
In the5. Idle Timeout field, the default value of “600” seconds is used. The other default settings
are also used in this example
Click6. OK
Figure 2.7 TCP Proxy Template
Figure 2.7 TCP Proxy Template

Performance by Design
9
Deployment Guide for Microsoft Office Communications Server 2007
Imporng of SSL Cerficate
Imporng of SSL Cerficate
For client-SSL template, we imported certificate and key from a remote server. If you are importing a
CA-signed certificate for which you used the AX device to generate the CSR, you do not need to import
the key. The key is automatically generated on the AX device when you generate the CSR. But in this
example we separately imported certificate and key from the remote server.
To import the Certificate:
Select1. Config Mode > Service > SSL Management
To import the certificate click Import. The2. SSL Management >> Certificate >> Import screen
appears
In the3. Name field, enter a name for the certificate. This is the name you will refer to when add-
ing the certificate to a client-SSL or server-SSL template
Select4. Certificate from the Type drop-down list, if not already selected
Click5. Browse and navigate to the location of the certificate
Once selected click6. Open. The path and filename appear in the Source field
Click7. OK. The certificate appears in the certificate and key list
Figure 2.8 SSL Certificate
Figure 2.8 SSL Certificate
To Import the Key:
Select1. Config Mode > Service > SSL Management
Click on the2. Import button. The SSL Management >> Certificate >> Import screen appears
In the3. Name field, enter a name for the key
Select4. Key from the Type drop-down list
Click5. Browse and navigate to the location of the key
Once selected click6. Open. The path and filename appear in the Source field
Click7. OK. The key appears in the certificate and key list

Performance by Design
10
Deployment Guide for Microsoft Office Communications Server 2007
Figure 2.9 SSL Key
Figure 2.9 SSL Key
Configuring SSL Server Template
Configuring SSL Server Template
In this step, SSL server template is configured for the virtual server.
To configure a Server SSL template:
Select1. Config Mode > Service > Template
Select2. SSL > Server SSL from the menu bar
Click3. Add. The Server SSL section appears
In the4. Name field, enter a name for the template. In this example, the name is “ocs-server-ssl”
In this example the other fields use the default values5. Click6. OK. The new template appears in the Server SSL >> List
Figure 2.10 Server SSL Template Configuration
Figure 2.10 Server SSL Template Configuration

Performance by Design
11
Deployment Guide for Microsoft Office Communications Server 2007
Configuring SSL Client Template
Configuring SSL Client Template
In this step, SSL client template is configured for the HTTPS virtual server. The SSL certificate and key
imported in the previous step are used here. Later, during configuration of the virtual server, the template
will be bound to the HTTPS virtual service port.
To configure a client SSL template:
Select1. Config Mode > Service > Template
Select2. SSL > Client SSL from the menu bar and drop down list
Click3. Add. The Template >> Client SSL >> Create screen appears
In the4. Name field, enter a name for the template. In this example, the name is “ocs-client-ssl”
In the5. Certificate Name drop-down list, select the certificate imported above. In this example,
name is “ocs2007.a10test.com.pem”
In the6. Key Name field, select the key imported above. In this example, name is “ocs2007.a10t-
est.com.key”
Click7. OK. The new template appears in the Client SSL >> List
Figure 2.11 Client SSL Template Configuration
Figure 2.11 Client SSL Template Configuration

Performance by Design
12
Deployment Guide for Microsoft Office Communications Server 2007
Configuring the Virtual Server for port 444 (HTTPS)
In this step we will configure the virtual server for port 444. This is a secure port so we will configure the
client and server SSL template on port 444.
To configure a virtual server:
Select1. Config Mode > Service > SLB
Click2. Virtual Server on the menu bar
Click3. Add. The General tab appears
In the4. Name field, enter a name for the virtual server. In this example, the name is “OCS-VS”
In the5. IP Address field, enter the IP address that clients will request. In this example we use
“192.168.111.3”
Figure 2.12 Virtual Server Configuration
Figure 2.12 Virtual Server Configuration
In the6. Port section, click Add. The Virtual Server Port tab appears
In the7. Type drop-down list, select HTTPS type for virtual server
In the8. Port field, type “444” for the HTTPS type
In the9. Service Group drop-down list, select the service group “ocs-https” from list
Figure 2.13 Virtual Server Configuration (Continuation)
Figure 2.13 Virtual Server Configuration (Continuation)

Performance by Design
13
Deployment Guide for Microsoft Office Communications Server 2007
The default10. Virtual Server Port Template is used for the service port, so leave default
selected
In the11. HTTP Template drop-down list, select the “OCS-HTTP” template configured above
In the12. Client-SSL Template drop-down list, select the “ocs-client-ssl” template configured
above
In the13. Server-SSL Template drop-down list, select the “ocs-server-ssl” template configured
above
In the14. TCP-Proxy Template field, select the “OCS-TCP-Proxy” template configured above
Figure 2.14 Virtual Server Configuration (Continuation)
Figure 2.14 Virtual Server Configuration (Continuation)
Click15. OK. The port appears in the Port list of the Port section
Click16. OK. The virtual server appears in the virtual server table
Click17. Save to save the configuration changes to the startup-config

Performance by Design
14
Deployment Guide for Microsoft Office Communications Server 2007
Configuring AX for SIP (5061) port on MicrosoOffice Com-
municaons Server 2007
In this section we will configure the AX for SIP on port 5061. For the OCS server we will use the default
health check on port 5061. You need to configure the following steps on AX.
Configure OCS (Office Communications Server) for port 5061• Configure Service Group• Configure Template• Configure Virtual Server•
Configuring Real Servers for OCS
In this step we configure Microsoft OCS real server with service port 5061. We configured port 444 and
5061. So steps 1 to 6 are the same as port 444 previously.
To configure a real server:
Select1. Config Mode > Service > SLB
Click the previously configured Server2. “OCS-07” from the Server list
In the3. Port section and the Port field, enter the number of the service port on the real server.
In this example, the port number is “5061”
In the4. Health Monitor (HM) drop-down list for the port, the health monitor is (default)
Figure 3.1 Real Server Port Configuration
Figure 3.1 Real Server Port Configuration
Click5. Add to add the port to the port list for the server
Click6. OK. The real server appears in the server table
Repeat this procedure for each of the Microsoft Office Communications Servers7.

Performance by Design
15
Deployment Guide for Microsoft Office Communications Server 2007
Service Group Configuraon
To configure a service group:
Select1. Config Mode > Service > SLB
Select2. Service Group on the menu bar
Click3. Add. The Service Group tab appears
In4. Name field, enter name of service group. In this example, the name is “ocs-sip”
In the5. Algorithm drop-down list, select the preferred load-balancing method. You can control
the load on each server by selecting the appropriate type of load balancing methods. For this
configuration, the default Round Robin is used
In the6. Server section, select a configured real server from the drop-down list
In the7. Port field, enter the port “5061”
Click8. Add. Repeat steps 6-8 for each real server
Click9. OK. The new group appears in the service group table
Figure 3.2 Service Group Configuration
Figure 3.2 Service Group Configuration

Performance by Design
16
Deployment Guide for Microsoft Office Communications Server 2007
Template Configuraon
TCP Template• Source IP Persistence Template•
Configuring TCP Template
Configuring TCP Template
For SIP, the TCP template is used for the service. The AX device has a default TCP template and you
can also configure your own TCP template on the AX. In this configuration we will configure a default
TCP template.
To configure TCP Template:
Select1. Config Mode > Service > Template
Select2. L4 > TCP on the top menu bar and drop down
Click3. Add
Enter a name for the template in the4. Name field, in this example we use “OCS-TCP”
Accept the default for the other configuration items5. Click6. OK. The new template appears in the TCP template list
Figure 3.3 TCP Template Configuration
Figure 3.3 TCP Template Configuration

Performance by Design
17
Deployment Guide for Microsoft Office Communications Server 2007
Configuring Source IP Persistence Template
Configuring Source IP Persistence Template
Source IP Persistence directs a given client, identified by its IP address, to the same service port, server,
or service group.
To configure Source IP Persistence Template
Select1. Config Mode > Service > Template
Select2. Persistent > Source IP Persistent on the menu bar
Click3. Add to configure the new template
In the4. Name filed enter a name for the template. In our example we used “OCS-SourceIP”
In the5. Timeout field default value is 5 minutes but in this example we used “10” minutes
Click6. OK. The new template appears in Source IP Persistence list
Figure 3.4 Source IP Persistance Template Configuration
Figure 3.4 Source IP Persistance Template Configuration

Performance by Design
18
Deployment Guide for Microsoft Office Communications Server 2007
Configuring Virtual Server for port 5061 (SIP)
In this step we configure the virtual server for port 5061. We configured port 444 and 5061 on the same
virtual server so steps 1 to 5 are the same as port 444.
To configure a virtual server:
Select1. Config Mode > Service > SLB
Select2. Virtual Server on the menu bar
Click3. Add. The General tab appears
In the4. Name field, enter a name for the virtual server. In this example, the Name is “OCS-VS”
In the5. IP Address field, enter the IP address that clients will request. In this example we use
“192.168.111.3”
Figure 3.5 Virtual Server Configuration
Figure 3.5 Virtual Server Configuration
On the6. Port tab, click Add. The Virtual Server Port tab appears
In the7. Type drop-down list, select TCP type for virtual server
In the8. Port field, type “5061” as a port number for SIP service
In the9. Service Group drop-down list, select the service group “ocs-sip” from list
Figure 3.6 Virtual Server Configuration (Continuation)
Figure 3.6 Virtual Server Configuration (Continuation)