Walkthrough of NET UX1000 Survivable Branch Appliance setup for #Lync

Here are some quick screenshots walking through the setup of a UX1000 with the SBA module for Lync. From a setup point of view you can think of Gateways with SBA’s as 2 devices in one. Where net particularly excels is making it nice and easy to setup both the “gateway” and “SBA” from one Web interface. As you will see on the walkthrough the setup process is pretty fluid.

This walkthrough is on a UX1000, but a UX2000 has the same WebGUI so the steps should be the same.

The gateway as a default management IP of 192.168.128.2. Set your IP to something on the same network and directly connect to the UX.

Connect your laptop directly to the UX management port:

Once you connect and ignore the cert error you will have some basic parameters to set

Once completed, OK, disconnect the laptop and connect the gateway to the network. You should now be able to connect on the IP you specified.

You may want to upgrade to the latest firmware at this point. See this blog post for the steps.

When you get past the login screen, it will want to load a Java app for the live port monitoring

Software version information

System Information

Set the time on the UX1000

Domain and Lync Topology Setup for Survivable Branch Appliance

First we’ll create a computer object for the SBA, you must do this before setting up the SBA or adding it to the Lync topology. On a DC create a new computer object.

At this point you could change the user/group to RTCUniversalSBATechnicians if you want that group to manage the SBA/join it to the domain, but we’ll leave it as domain admins

Once you have created the account, you need to make an edit in ADSI

Add this value, where domain.int is replaced with your domain giving the SBA FQDN

Once set you can ok and exit ADSI

We also need to add a DNS record for the gateway

You can now add the SBA to the Lync Topology

Once you click finish your new Branch site will show in the topology, you can now publish the topology

Gateway Setup

First we will setup the “gateway” part of the device. The gateway requires a certificate for TLS

Request your cert from the internal CA

You will also need the Root Cert

Back on the gateway, import the root cert on the Trusted CAs tab (note, IE causes me an issue, here, if you struggle try FireFox). Then upload your created cert.

Continue to run through the Lync setup, choose a setup scenario. In this case we will do SIP to ISDN

Once you have filled in the above setup is complete.

Survivable Branch Appliance Setup

You can now continue to setup the SBA, click Setup SBA and setup an IP. ASM is Application Solutions Module, which is the module the SBA code runs on (think of it as a mini server).

On the UX1000, if you have the SBA module you will get an extra menu on the left

SBA before setup:

The SBA will automatically pickup an IP address from the same single network connection you connect the gateway with (assuming you have DHCP on the network). You will want to set a static IP

Join the SBA to the domain:

In order, prepare the SBA, Start replication and Activate the SBA.

At each setup this is running the PowerShell commands on the SBA to take these actions:

Next we will setup a certificate for the SBA. If your internal CA is setup to take automatic submissions you can choose auto submit and not have to manually go to the SBA. In this case I had to get the cert signed manually.