Microsoft Lync Qualification Testing on Extreme Networks Switch Infrastructure

Transcription

1 Microsoft Lync Qualification Testing on Extreme Networks Switch Infrastructure Solution Description and Test Results Abstract: This document details the Extreme Networks/Microsoft UCOIP Lync Server Partner qualification testing and test results, including configurations of Extreme Networks switches that ensure predictable performance and quality of service (QoS) in the Lync-enabled environment. Published: April 2013 Extreme Networks, Inc. 145 Rio Robles San Jose, California Phone / Toll-free / Extreme Networks, Inc. All Rights Reserved. AccessAdapt, Alpine, Altitude, BlackDiamond, Direct Attach, EPICenter, ExtremeWorks Essentials, Ethernet Everywhere, Extreme Enabled, Extreme Ethernet Everywhere, Extreme Networks, Extreme Standby Router Protocol, Extreme Turbodrive, Extreme Velocity, ExtremeWare, ExtremeWorks, ExtremeXOS, Go Purple Extreme Solution, ExtremeXOS ScreenPlay, ReachNXT, Ridgeline, Sentriant, ServiceWatch, Summit, SummitStack, Triumph, Unified Access Architecture, Unified Access RF Manager, UniStack, VM Tracker, the Extreme Networks logo, the Alpinelogo, the BlackDiamond logo, the Extreme Turbodrive logo, the Summit logos, and the Powered by ExtremeXOS logo are trademarks or registered trademarks of Extreme Networks, Inc. or its subsidiaries in the United States and/or other countries. sflow is the property of InMon Corporation. Specifications are subject to change without notice. All other registered trademarks, trademarks, and service marks are property of their respective owners. For additional information on Extreme Networks trademarks, see

2 Contents CONTENTS... 2 INTRODUCTION... 3 TEST PLAN... 4 TEST EQUIPMENT... 5 NETWORK TOPOLOGY... 6 QUALITY OF SERVICE (QOS)... 8 IDM EXTREME NETWORKS IDENTITY MANAGER... 9 IDM AND ONEFABRIC CONTROL CENTER INTEGRATION MICROSOFT LYNC SDN API MICROSOFT LYNC AND EXTREME NETWORKS IDENTIFI WIFI MICROSOFT HYPER- V AND EXTREME NETWORKS IN THE DATA CENTER MICROSOFT SCCM AND EXTREME NETWORKS SWITCH CONFIGURATION IDM CONFIGURATION VM TRACKING CONFIGURATION (WITHOUT DCM) TEST RESULTS CONCLUSION APPENDIX Extreme Networks, Inc. All rights reserved. 2

3 Introduction The Microsoft Unified Communications Open Interoperability Program (UCOIP) is a qualification program for third party network infrastructure and telephony vendors. Under this program, devices must pass rigorous and extensive testing and conform to requirements specified by Microsoft in order to achieve Lync Server partner status. Under this program, Extreme Networks demonstrated a network solution for converged services supporting every aspect of unified communications, including VoIP desk phone, softphones, instant messaging and video collaboration. The test plan provided by Microsoft defines a design specification to perform voice and video quality tests in a Microsoft Lync Server Unified Communications and Collaboration environment. These tests are intended to validate interoperability and voice quality with Microsoft Lync running on Extreme Networks switching infrastructure. All test goals were successfully met. This paper provides details of the Extreme Networks/Microsoft UCOIP Lync server partner qualification testing and test results. Also included are details on the configurations used on Extreme Networks switches to ensure predictable performance and acceptable quality of service (QoS) in the Lync-enabled environment. Figure 1: Reference topology provided by Microsoft in the test design specification. Extreme Networks, Inc. All rights reserved. 3

4 Test Plan The test plan consists of cases in which Lync voice and video point-to-point calls and multipoint conference calls are made between Lync client endpoints. The test cases include calls locally within a site, as well as between sites across the WAN. A Lync QoE Monitoring Server (QMS) was used to capture Quality of Experience (QoE) metrics. This QoE monitor gathers real-time data from the Lync soft clients, Lync phones and Lync servers to provide usage, call diagnostic information, and media quality information. The data is stored as call detail records (CDR) and Quality of Experience (QoE) records in a SQL databases. A set of standard reports are available by Microsoft SQL Server Reporting Service including a Media Quality Summary Report which includes metrics on packet loss, jitter and Mean Opinion Scores (MOS). These three call quality metric results are listed in the reports table (figure 3). A MOS score is a measurement on how a person perceives transmitted voice quality. It has been used for decades in telephony networks. Traditionally this value was obtained by human listeners sitting in quiet rooms and scoring perceived call quality on a scale from 1 (bad) to a high score of 5 (excellent). This method is inherently subjective so advanced algorithms were developed to objectively measure call quality and predict the results of a subjective test. Lync QMS reports several different measures of voice quality including Network Mean Opinion Score (NMOS). NMOS is a metric that considers network conditions impacting the audio quality of the call. NMOS takes into consideration network factors such as packet loss, packet reorder, packet errors, jitter and the codec used. NMOS measures only the impact of the network on the listening quality. Other MOS values provided by QMS such as Listening Quality MOS (MOS-LQ) factor in including the IP packets payload (speech level, noise level, etc.). Therefore NMOS values reported here as values based on the packet payload do not indicate network impact on the audio quality of the calls. Extreme Networks, Inc. All rights reserved. 4

5 Test Equipment The following equipment and devices were used in the test environment: EXTREME NETWORKS SWITCHES BlackDiamond X8 OS Version: ExtremeXOS BlackDiamond 8806 OS Version: ExtremeXOS Summit X670V-48t OS Version: ExtremeXOS Summit X480-48t OS Version: ExtremeXOS Summit X460-48p-10G OS Version: ExtremeXOS Summit X460-48p OS Version: ExtremeXOS Summit X460-48p OS Version: ExtremeXOS Summit X440-24p OS Version: ExtremeXOS SERVERS Dell R610 / OS: Microsoft Server 2008 Server with HyperV Microsoft Lync Server 2010, Standard Edition (Virtual Machine) Microsoft Lync Server, Quality Management Server (Virtual Machine) Microsoft Server 2008 R2 Enterprise, Domain Controller, DHCP Server, DNS Server, NTP Server (Virtual Machine) LYNC CLIENTS 2 Dell Latitude D620 / OS: Windows XP SP3, Lync Soft Client Dell Latitude D620 / OS: Windows 7 Ultimate, Lync Soft Client Dell Latitude D630 / OS: Windows 7 Enterprise, Lync Soft Client Polycom CX600 Desktop Phone for Microsoft / Lync Firmware Polycom CX500 Desktop Phone for Microsoft / Lync Firmware Microsoft LifeCam Studio Webcams, Model Plantronics Audio 628 Stereo USB Headsets WAN EMULATOR TATA WANem Version 2.3 TRAFFIC GENERATOR IXIA Optixia XL10 OS: IxOS GA Extreme Networks, Inc. All rights reserved. 5

6 Network Topology As specified by Microsoft the network consisted of four sites. The sites were connected via 1 GbE links to a simulated WAN. The WAN consisted of a BlackDiamond X8 modular switch and a WAN impairment server. In order to simulate network degradation across the WAN network latency and packet loss were injected for all traffic between sites. This was achieved by routing all traffic between sites through the network impairment server where latency and packet drop could be controlled. Latency and packet drop by the impairment server was verified using an IXIA network tester prior to running all tests. In addition the IXIA tester provided background traffic during testing. Extreme Networks, Inc. All rights reserved. 6

7 MAIN SITE At the main site was a two-tier network consisting of an Extreme Networks BlackDiamond 8806 modular switch as the core, an Extreme Networks Summit X670V-48t top-of-rack switch in the data center, and a Summit X460-48p at the edge. The Summit X460 was connected to the BlackDiamond 8806 using a 10GbE uplink and the X670V was connected using a 40GbE uplink. A Microsoft HyperV Server in the virtualized data center hosted the Microsoft Lync server, the Microsoft Lync QMS server, and a Microsoft Server 2008, which provided Domain Controller, DHCP Server, DNS Server and NTP services to the main site as well as all remote sites. Two laptops running the Lync soft client were connected to the Summit X460-48p, and one Lync-enabled IP Phone was connected to the BlackDiamond Power to the phone was provided via PoE. REMOTE SITE 1 Remote site 1 consisted of a Summit X480-48t and a Summit X460-48p-10G stacked as a SummitStack virtual chassis using SummitStack-V. A laptop running the Lync soft client and a Lync-enabled IP Phone connected to the SummtStacked switches. Power to the phone was provide via PoE. Note SummitStack supports up to 8 Extreme Networks Summit switches with mix and match, crossplatform stacking. REMOTE SITE 2 Remote site 1 consisted of a Summit X460-24p. A laptop running the Lync soft client and a Lync-enabled IP Phone connected were connected to the switch. Power to the phone was provide via PoE. REMOTE SITE 3 Remote site 1 consisted of a Summit X440-24p. A laptop running the Lync soft client and a Lync-enabled IP Phone connected were connected to the switch. Power to the phone was provide via PoE. WIDE AREA NETWORK (WAN) All Sites were connected through the WAN and consisted of a BlackDiamond X8 modular switch and a server running TATA s WANem Wide Area Network Emulator. All connections to the sites as well as to the WAN emulator were 1GbE links. Extreme Networks, Inc. All rights reserved. 7

8 Quality of Service (QoS) All Extreme Networks switches allow an administrator to provide different levels of service to different groups of traffic using eight (8) hardware queues per port. Traffic groups can be defined using Accesslists, CoS 802.1p values, Port, VLAN, and DiffServ (Differentiated Services) code point (DSCP). In addition, QoS traffic groups can be assigned on Extreme Networks switches using Identity Management (IDM) role-based policies, ExtremeXOS Network Virtualization (VM Tracker), virtual port profile (VPP) policies, Universal Port (UP) scripts and Clear-Flow rules. * For this test, DiffServ examination was used to enforce QoS on the network within each site. DiffServbased traffic groups forward traffic to egress QoS profiles based on the type-of-service (TOS) or traffic class (TC) information in an IP packet. DiffServ uses the Differentiated Services Field (DS field), which is the upper 6 of the 8 TOS bits to set DiffServ code point (DSCP) value. Because the DSCP uses six bits, it has 64 possible values (0-64). With Diffserv examination enabled on all switches at each site, each packet s DSCP field is examined and forwarded out the appropriate HW queue based on the DSCP value. By default, MS Lync server has QoS enabled for devices running Lync Phone Edition and will mark the voice packets with a DSCP value of 40 (802.1p values are set to 0). This can be verified by running the Get-CsUCPhoneConfiguration from the Lync Server Management Shell. Many Lync-enabled phones support DSCP however some models do not support QoS. The Polycom CX500 and CX600 used in this test did support DSCP, thus the voice packets were marked with a DSCP value of 40. However, for Lync soft clients, QoS is not enabled by default. Additional configuration is required in order to take advantage of QoS for Lync soft clients. Refer to the Microsoft Lync Server 2010 Quality of Service (QoS) Deployment Guide for instructions. The guide can be found on Microsoft s web site at aspx?id=12633 Extreme Networks features such as IDM, VM Tracker and Universal Port can be used to automatically identify users and devices and apply QoS policies to their traffic without the traffic explicitly being marked by the end device. Optionally, other methods such as standard ACL s can be used to classify and prioritize traffic. For this Lync testing, IDM was used to identify the edge users and devices and apply QoS policies based on their identity that prioritized Lync traffic on the network. Similarly, VM Tracker was used to identify and apply QoS policies to the Lync backend servers running as VMs in the data center to ensure all Lync related traffic was prioritized. Extreme Networks, Inc. All rights reserved. 8

9 IDM Extreme Networks Identity Manager IDM enables the network edge to identify and manage access to the users and devices that connect to it, such as IP phones, IP cameras, printers, access points, and more. IDM can apply policies to users based on their identity, independent of the device being used to connect to the network. IDM can also identify users based on multiple attributes including a user login name (e.g. Kerberos snooping or Netlogin). Similarly devices can be identified and assigned roles based on netlogin, MAC address, MAC Organizationally Unique Identifier (OUI) and Link Layer Discovery Protocol (LLDP) attributes. In addition, the switch can query an LDAP server and collect additional information about connected identities in order to apply granular roles and policies. The Lync soft clients in this test were identified and applied roles by IDM using Kerberos snooping. Kerberos is the network authentication protocol used by Microsoft Active Directory. When IDM is enabled on an edge port, all devices off that port are initially assigned to the unauthenticated role by the switch. When a user logs into the domain the switch snoops the Kerberos authentication service request (AS- REQ) and captures their identity via their AD username. The switch also snoops Kerberos authentication service response (AS-REP), and if Active Directory validates and approves their credentials, the switch moves the user to an authenticated role. If the credentials fails or the client does not attempt to authenticate, the users remains in an unauthenticated role. In addition, custom roles can be defined based on several available attributes, including attributes derived from LDAP servers. After users are moved to the authenticated role, the switch queries an LDAP server for the user s attributes (e.g. group membership, job function, location, and mor). Users are then assigned a custom role if their attributes match a role defined by the network administrator. Users then inherit network policies within the roles. Policies that include ACLs, QoS and other parameters can be applied to all roles (and their network traffic) for bandwidth management, security and other purposes. For this testing, all users were assigned a Lync-User role based on AD group membership. This role included QoS policies that prioritized all Lync-related traffic and all traffic to the data center servers. IDM identified the phones via LLDP and MAC OUI. For this test, connected devices that advertised their system capabilities as a telephone were assigned a Lync-Phone-L role. Devices (i.e. IP phones) that did not support LLDP were assigned a Lync-Phone-M role if its MAC address vendor code matched 00:04:F2. These roles also included QoS policies that prioritized all Lync-related traffic and all traffic to the data center servers. In addition to IDM assigning QoS policies, Diffserv examination was enabled on all the switches in each site to prioritize traffic for devices that marked their packets with a DSCP of 24 and 40. Extreme Networks, Inc. All rights reserved. 9

10 IDM and OneFabric Control Center Integration Extreme Networks OneFabric Solution Architecture enables organizations to benefit from centralized management and configuration of both wired and wireless networks, network-wide visibility and control of new applications and services, secure and granular access control to network resources, and a centralized programming API to automate and orchestrate network provisioning through other IT systems. OneFabric Connect API enables business applications to directly provision services in the network via OneFabric Control Center and NetSight, our centralized network management application. Networkpowered application analytics and optimization is delivered by our Purview Engine, which captures and analyzes context-based traffic to deliver meaningful intelligence about applications, users, locations, and devices. Our NAC solution ensures only authorized users have access to the network, while OneView provides a single unified interface to each of these powerful tools, including extensive reporting and network analytics. Predefined integrations within OneFabric Connect SDN on top of the API allow out-of-the-box programmatic control of networks services to deploy Physical/Virtual Machines, Mobile Device Management, web filtering, and firewall systems, while additional customer-defined integrations are enabled via OneFabric Connect API, our open, XML/SOAP-based API. Extreme Networks provides Connect SDN support across virtual, stackable, chassis and wireless access technologies, and offers a comprehensive, standards-compliant and open infrastructure. With the ExtremeXOS operating system, a consistent set of features is delivered across the network on an open standard, comprehensive, turn-key platform, and enhanced via integrated network management and other services. Developers, partners, customers and service providers leverage OneFabric Connect SDN to develop applications and enable greater innovation by providing formal abstractions at the network layer with innovations from Extreme. Using the OneFabric Solution Architecture, organizations can dynamically optimize network resources and investments to fit changing business strategies, and create an open foundation for delivering new services, increased efficiencies, reduced costs, and sustained advantage without compromise. Integration of Extreme Networks NetSight Management with XOS-based switches enhances visibility and control capabilities over network infrastructures based on Summit and Black Diamond models. NetSight is a software-based solution that leverages a centralized NAC architecture to gather and aggregate information about end-systems and users in a single database, then processes all data internally through a rule engine and assigns network profiles to devices using the switches mainly as enforcement points through RADIUS protocol. The solution is composed by two modules, working as a single logical NAC entity: NetSight Management Server (NMS), which keeps the centralized database NAC Appliance, which performs also RADIUS termination and NMS updates Extreme Networks, Inc. All rights reserved. 10

11 Information gathering and aggregation is performed in different ways, involving both modules: Information on the switch (i.e. MAC to IP resolution) is queried through SNMP or received during the RADIUS authentication handshake (MAC address, physical port, 802.1x Username) Centralized DHCP traffic snooping, through mirror/redirection, toward NetSight appliances LDAP lookups performed centrally by the NetSight appliance NAC application updates and manipulation through the One Fabric Connect API, a documented SOAP web service, available on NetSight. Microsoft Lync SDN API In addition to the Microsoft Lync WiFi and Switching certification Extreme Networks has integrated with Microsoft Lync. Integrations include Lync connectivity analytics delivered via our Purview Analytics engine reported through NetSight. NetSight is a single pane of glass management system that provides wired/wireless visibility and control. The Microsoft Lync API relays detailed information regarding video and audio to OneFabric Connect (part of Extreme Networks SDN platform), where this data can be utilized to provide in-depth visibility into the quality of audio/video calls, and allow administrators to monitor and troubleshoot elements impacting user experiences. Additionally the SDN API integration via the Extreme SDN Platform delivers QoS for Lync video and audio applications. This integrated solution resolves complex QoS implementation challenges arising from Lync end system QoS provisioning and inefficient static network policies due to the wide range of dynamic UDP ports in use by Lync traffic. Additional information regarding Extreme Networks integrated solutions with Microsoft Lync can be found on Extreme Networks Website. Microsoft Lync and Extreme Networks IdentiFi WiFi IdentiFi Wireless Microsoft Lync qualification provides confidence that your network investment is interoperable with Microsoft Lync. Additional information regarding Extreme Networks integrated solutions with Microsoft Lync can be found on Extreme Networks Website. The documents are intended for network administrators who have or will be implementing MS Lync on an Extreme Networks IdentiFi WLAN network. They do provide configuration guidance on optimizing IdentiFi Wireless to support MS Lync wireless clients and is a supplement to the Extreme Networks IdentiFi guides. Topics covered include QoS, roaming, power save and load balancing configurations. Microsoft provides additional information on optimizing a Microsoft Lync deployment on WiFi infrastructures. Extreme Networks, Inc. All rights reserved. 11

12 Microsoft Hyper-V and Extreme Networks in the Data Center Extreme Networks Data Center Manager (DCM), part of OneFabric Control Center, provides IT administrators with a transparent, cross-functional service provisioning and orchestration tool that bridges the divide between the server, networking, and storage teams and provides a single integrated view of virtual server and network environments. By enabling the unification and automation of the physical and virtual network provisioning, Data Center Manager enables networks to benefit from the high availability required for mission critical application and data performance. DCM delivers numerous benefits to IT teams, including the ability to: Automate physical and virtual switching environments to streamline data center network provisioning Create consistent configurations throughout the network fabric for predictable behaviors and simplified troubleshooting Increase coordination and improve workflow between network, server, and storage teams within IT Gain granular visibility into traffic flows and real-time and historical data to simplify incorporation of VMs into the network, improve visibility and control, and enable simplified auditing of the network via policy-based management Unify management through an easily extensible architecture that supports a variety of hypervisor technologies and vswitches, including VMware, Citrix, and Microsoft Supported Platforms are (not limited to): Microsoft Windows Server 2008 R2 and 2012 with Hyper-V support Microsoft SCVMM 2008 R2 and 2012 Additional information regarding Extreme Networks integrated solutions with Microsoft Hyper-V can be found on Extreme Networks Website. Microsoft SCCM and Extreme Networks Integration with Microsoft SCCM and OneFabric Connect provides automatic detection of SCCMmanaged devices and assigns appropriate quality of service and security policies. System Center administrator can access OneView Reporting to see detailed network information on all System Center managed devices, including Netbios name, user, operating system, service pack, hardware manufacturer and model, received from SCCM and automatically policies are assigned. Additional information regarding Extreme Networks integrated solutions with Microsoft SCCM can be found on Extreme Networks Website. Extreme Networks, Inc. All rights reserved. 12

13 Switch Configuration This section provides example configuration steps performed on the switches used for this test relating to QoS, IDM and VM Tracker. QOS CONFIGURATION The steps below enable Diffserv examination. When a packet arrives at the switch on an ingress port, the switch uses the DSCP value to select the egress QoS profile that forwards the packet. For this test, the DSCP value of 40 was used by the Lync end points and a DSCP value of 24 was used for traffic from the Lync and other servers in the data center. Refer to the Extreme Networks ExtremeXOS Concepts Guide, Command Reference Guide and the sample configuration in the appendixes for additional details on configurations and commands. Note QoS was not enabled in the WAN network 1. Create QoS profiles: Ingress traffic is associated with a QoS profile for assignment to one of eight hardware queues in the system that define how the traffic flows with respect to bandwidth, priority, and other parameters. By default, there are two QoS profiles (QP1 and QP8) with QP8 being the highest priority traffic and QP1 being the lowest priority. All data traffic, by default, is assigned to QP1 and is forwarded using the lowest priority hardware queue. QP8 is typically reserved for high priority network control traffic. A QoS profile in the range QP2 to QP7 need to be created before you can configure it or assign it to traffic groups. X460-24p.1 # create qosprofile QP4 X460-24p.2 # create qosprofile QP6 2. Set a minimum guaranteed bandwidth (in percent) for QOS Profiles QP4 and QP6: X460-24p.3 # configure qosprofile QP4 minbw 10 maxbw 100 ports all X460-24p.4 # configure qosprofile QP6 minbw 10 maxbw 100 ports all 3. Configure the DiffServ code point (DSCP) to QoS profile mapping: By default DSCP 0-55 are mapped to QP1. DSCP are mapped to QP8. Configure the DiffServ code point (DSCP) to QoS profile mapping X460-24p.5 # configure diffserv examination code-point 24 qosprofile QP4 X460-24p.6 # configure diffserv examination code-point 40 qosprofile QP6 4. Enable the diffserv field of an IP packet to be examined in order to select a QoS profile: By default diffserv examination is disabled. X460-24p.7 # enable diffserv examination port all Extreme Networks, Inc. All rights reserved. 13

14 IDM Configuration 1. Configure ports for to identify users and devices with IDM: X460-24p.8 # configure identity-management add ports Add an LDAP domain, configure the base-dn, configure the LDAP base-dn to be used while searching a user. X460-24p.9 # create ldap domain fabrikam.com X460-24p.10 # configure ldap domain fabrikam.com base-dn fabrikam.com X460-24p.11 # configure ldap domain fabrikam.com bind-user mannyg encrypted }`tzctkpm? 3. Configure the LDAP client credentials required for the switch to access an LDAP server and configure the parameters for contacting the server. X460-24p.12 # configure ldap domain fabrikam.com add server client-ip vr VR- Default 4. Configure IDM to assign the Lync-User role to a user who is a member of the FTE users groups in Active Directory: X460-24p.13 # create identity-management role Lync-User match-criteria memberof==fte; 5. Configure IDM to assign the Lync-Phone-M role to devices with specific MAC OUIs X460-24p.14 # create identity-management role Lync-Phone-M match-criteria mac-oui==00:04:f2; 6. Configure IDM to assign the role Lync-Phone-L to an LLDP enabled device whose LLDP capability equals Telephone X460-24p.15 # create identity-management role Lync-Phone-L match-criteria device-capability==telephone; 7. Create policy file: Policy files are text files that can contain rules to forward or drop packets, assign traffic to a QoS profile, meter traffic, mirror traffic, and perform additional actions. Policy files can be created offline using a text editor and downloaded to the switch, or created using the VI-like editor on the switch. The policy below replaces the DSCP (with the previously configured mapping of code point 40 to qp6) and assigns the traffic to QoS profile qp6 for UDP traffic with a port in the range This wide range is specified due to the default Lync configuration in which Lync client applications can use any port between ports 1024 and This range is configurable in Lync. For simplicity the default ranges were used. However it is recommended to configure Lync to use specific UDP port ranges for specific Lync communication types. This enables the ability to differentiate between Lync communication types as well as other UDP application traffic that may use the default range and apply different levels of service using QoS. Extreme Networks, Inc. All rights reserved. 14

15 For instructions on changing the port ranges refer to Configuring Port Ranges on Lync Clients for Quality of Service (QoS) section on Microsoft s TechNet library: gg405406%28v=ocs.14%29.aspx X460-24p.15 # edit policy Lync-User-Plcy entry Lync-QoS{ if { protocol udp; source-port ; } then { permit; replace-dscp ; qosprofile QP6; } } entry DC-QoS{ if { destination-address /24; } then { permit; replace-dscp ; qosprofile QP4; } } To save and exit (write and quit) the text editor press the escape key followed by :wq 8. Add the policy to previously created IDM roles Note - For conciseness, the same policy was used for all three roles X460-24p.16 # configure identity-management role Lync-User add policy Lync-User-Plcy X460-24p.17 # configure identity-management role Lync- Phone-L add policy Lync-User-Plcy X460-24p.12 # configure identity-management role Lync- Phone-M add policy Lync-User-Plcy 9. Enable IDM on the switch X460-24p.12 # enable identity-management Extreme Networks, Inc. All rights reserved. 15

16 10. Verify IDM entries exist for connected devices and correct role has been identified ID Name/Domain Flags Port MAC/IP VLAN Role dianep --k- 2 00:1c:23 :58:20 :f6 v30(1) Lync-User FABRIKAM.COM (1) TELEPHONE(00:04:f> :04:f2:95: 72:c9 V30(1) Lync-Phone-M (1) X460-24p.1 # show identity-management entries Flags: k - Kerberos Snooping, l - LLDP Device, m - NetLogin MAC-Based, w - NetLogin Web-Based, x - NetLogin 802.1X Legend: > - VLAN / ID Name / Domain / Role Name truncated to column width (#) - Total # of associated VLANs/IPs -- NA --- No IP or VLAN associated Total number of entries: 2 Extreme Networks, Inc. All rights reserved. 16

17 VM Tracking Configuration (without DCM) 1. Enable VM Tracker (VM-tracking): X670V-48t.1 # enable vm-tracking 2. Create Policy file: The following policy replaces the DSCP (with the previously configured mapping of code point 24 to qp4) and assigns the traffic to QoS profile qp4 X670V-48t.2 # edit policy Lync-Server-Plcy entry Lync-QoS{ if { } then { permit; replace-dscp ; qosprofile QP4; } } To save (write) and exit (quit) the text editor press the escape key followed by :wq 3. Create VPP X670V-48t.3 # create vm-tracking vpp Lync_VPP 4. Add policy to newly created VPP: X670V-48t.4 # configure vm-tracking vpp Lync_VPP add ingress policy Lync-Server-Plcy policyorder 1 5. Configure VM Tracker with VMs to track and assign VPP: Note Optionally these mappings can be defined in a VMMAP file and stored in a reposotory server where each switch can automatically download the mappings. When using Ridgeline the VMs are automatically discovered via integration with the virtual machine manager. X670V-48t.5 # create vm-tracking local-vm mac-address 00:15:5d:00:dc:00 X670V-48t.6 # create vm-tracking local-vm mac-address 00:15:5d:00:dc:01 X670V-48t.7 # configure vm-tracking local-vm mac-address 00:15:5d:00:dc:01 name Lync_DC X670V-48t.8 # configure vm-tracking local-vm mac-address 00:15:5d:00:dc:01 vpp Lync_VPP X670V-48t.9 # create vm-tracking local-vm mac-address 00:15:5d:00:dc:02 X670V-48t.10 # configure vm-tracking local-vm mac-address 00:15:5d:00:dc:02 name Lync_SE X670V-48t.11 # configure vm-tracking local-vm mac-address 00:15:5d:00:dc:02 vpp Lync_VPP X670V-48t.12 # create vm-tracking local-vm mac-address 12:44:44:44:44:44 X670V-48t.13 # configure vm-tracking local-vm mac-address 12:44:44:44:44:44 name Lync_QMS X670V-48t.14 # configure vm-tracking local-vm mac-address 12:44:44:44:44:44 vpp Lync_VPP Extreme Networks, Inc. All rights reserved. 17

18 6. Enable VM tracking on hypervisor connected ports X670V-48t.15 # enable vm-tracking ports Verify VM Tracker entries exist for connected VMs X670V-48t.16 # show vm-tracking VM Tracking Global Configuration VM Tracking: Enabled VM Tracking authentication order: nms vm-map local VM Tracking nms reauth period: 0 (Re-authentication disabled) VM Tracking blackhole policy: none Port : 43 VM Tracking: Enabled VM Tracking Dynamic VLAN: Disabled MAC Flags APC IP ADDRESS Type Value 00:15:5d:00:dc:01 LI- VM Lync_DC VLAN Tag 4049 VR Name VR-Default VPP Lync_VPP 00:15:5d:00:dc:02 L-- VM Lync_SE VLAN Tag 4049 VR Name VR-Default VPP Lync_VPP 12:44:44:44:44:44 LI- VM Lync_QMS VLAN Tag 4049 VR Name VR-Default VPP Lync_VPP Flags : (A)uthenticated: L - Local, N - NMS, V - VMMAP (P)olicy Applied : B - All Ingress and Egress, E - All Egress, I - All Ingress (C)ounter Installed : B - Both Ingress and Egress, E - Egress Only, I - Ingress Only Type : IEP - Ingress Error Policies EEP - Egress Error Policies Number of Network VMs Authenticated: 0 Number of Local VMs Authenticated : 3 Number of VMs Authenticated : 3 Extreme Networks, Inc. All rights reserved. 18

19 Test Results Following is the table summarizing the results of all tests as reporting by the Lync QMS QoE server: Extreme Networks, Inc. All rights reserved. 19

20 Conclusion Microsoft Lync QoE metrics results validated that Lync voice and video quality was maintained at a highly acceptable level even while network impairment and background traffic was introduced. In addition to standard methods used to prioritize network traffic and enforce policies, an Extreme Networks solution can provide added benefit by enabling VM, user, device, location, and presence awareness in networks and data centers, and helps in enforcing corporate policies at every network point of entry. Extreme Networks delivers a high performance, highly scalable network with visibility, mobility, and control that allow businesses to successfully deploy a converged, smarter network. Extreme Networks, Inc. All rights reserved. 20

21 Appendix References: Extreme Networks Technology Solution Partners Extreme Networks Wireless Products: Extreme Networks Documentation: Delivering Lync 2013 Real-Time Communications over Wi-Fi: Lync Server Managing Quality of Service (QoS): Delivering Lync Real-Time Communications over Wi-Fi (Lync 2010): Enabling Quality of Service with Microsoft Lync Server 2010: Technical Library for Microsoft Lync Server: About Extreme Networks Extreme Networks, Inc. (NASDAQ: EXTR) is setting a new standard for superior customer experience by delivering network-powered innovation and market leading service and support. The company delivers high-performance switching and routing products for data center and core-to-edge networks, wired/wireless LAN access, and unified network management and control. Our award-winning solutions include software-defined networking (SDN), cloud and high-density Wi-Fi, BYOD and enterprise mobility, identity access management and security. Extreme Networks is headquartered in San Jose, CA and has more than 12,000 customers in over 80 countries. For more information, visit Extreme Networks website at Extreme Networks, Inc. All rights reserved. 21