[Skype for Business] Plan for hybrid voice with no on-premises server deployment

The minimal topology for the virtual on-premises deployment includes the following:

• Edge server - Communication between the on-premises topology and the online services goes through the Edge server, which includes the following components:

  • Access Edge / SIPSTACK – provides SIP routing between the on-premises deployment and Skype for Business Online

  • Media Relay– routing of media between the Mediation server and other media endpoints

  • Media Relay Authentication / MRAS – generates tokens for access to media relay

  • Outbound Routing – provides routing to gateways based on policies. Only global policies which are based on destination (outbound) PSTN numbers are supported.

  • Central Management Store (CMS) Replica– synchronizes configuration information from the global CMS DB on the CMS Role server.

• Mediation Server – Implements SIP and Media gateway mapping protocol between Skype for Business and PSTN gateways. Also includes a CMS Replica that synchronizes configuration from the global CMS database.

• Central Management Store (CMS) Role – includes the configuration store for the topology components, including CMS File Transfer.

Prérequis:

• An admin account with permissions to install and configure Hyper-V on the host servers. The account must have admin permissions on the local server where Hyper-V is installed and configured.

• An admin account with permissions to create and publish the topology in the domain. This could be the same account used to install and configure Hyper-V, but must also be a member of the following roles:

  • AD Schema Admin - used to extend the AD schema for the minimal topology solution

  • Enterprise Admin - used to create and publish the topology and install server roles

  • Domain Admin - used to create and publish the topology and install server roles

• The external DNS records, which are defined in the HybridVoiceMinTopNew.ini included with the installation package, are created and in place

  • ap.<Domain Name>

  • mr.<Domain Name>

• An Office 365 tenant with all required DNS and SRV records created.

  Important:
  For the minimal topology solution, the use of the default domain suffix, .onmicrosoft.com, is not supported

• A certificate for the external Edge obtained from a public Certificate Authority (CA)

• Firewall rules to allow traffic through the required ports has been completed. The required ports include: ports (443, 5061, 3478) and gateway configurations for Internet -> DMZ and DMZ-> Internal Network (a.k.a CorpNet).