Hi All,

Need your expert advice for my scenario. Below is my environment explained -

I have Lync 2010 Enterprise setup with 4 Edge servers for internet users. We have 3 External facing NIC in each Edge server for Access Edge, Web Conf and Audio/Video. Each interface is being loadbalanced by Citrix Netscaler HLB and we have 3 VIPs which are published on internet for 3 different Edge traffics. As per the Citrix HLB guide I opened below ports between Internet and HLB VIP -

1. AE VIP - 5061 and 443 (Unidirectional from internet towards VIP)

2. Webconf VIP - 443 (Bidirectional)

3. A/V VIP - 443 and UDP 3478 (Bidirectional)

Any to Any Ports are open between HLB VIPs and Edge External NICs IPs.

So my question is -

1. Is there any ports need to be opened extra other than mentioned above ?

2. Will there be any ports needed between Edge External NIC IPs and internet users or all traffic will flow through HLB only even when Edge is replying to incoming requests.

3. As per the Citrix HLB guide, dynamic port range for A/V traffic is not required to open and we need just TCP 443 and UDP 3478 bidirectional open. Is that right ? If not, why ?

Request you all experts to please answer my queries. Thanks a lot in advance.

Check the below link for better understanding of all ports required:

https://technet.microsoft.com/en-us/library/gg398739(v=ocs.14).aspx