Changes Required for the IM and Presence Service Publisher
|
|
Change the static PAT to use an arbitrary, unused port for the public IM and Presence Service address.
|
Change:
static
(inside,outside) tcp
public_imp_ip_address
5061 routing_imp_private_ip_address
5062 netmask
255.255.255.255
to:
static (inside,outside)
tcp public_imp_ip_address 55061 routing_imp_publisher_ private_ip_address 5062 netmask 255.255.255.255
|
Change:
object service obj_tcp_source_eq_5061 # service
tcp source eq 5061
nat (inside,outside)
source static
obj_host_routing_imp_private_ip_address obj_host_public_imp_ip_address service
obj_tcp_source_eq_5062
obj_tcp_source_eq_5061
to
object service obj_tcp_source_eq_55061
# service tcp source eq
55061
nat (inside,outside)
source static
obj_host_routing_imp_private_ip_address
obj_host_public_imp_ip_address service
obj_tcp_source_eq_5062
obj_tcp_source_eq_55061
|
Add a new static PAT to allow messages sent to the public IM and Presence Service address to be forwarded to the virtual port address (on whichever port the load balancer is listening for TLS messages).
|
static (inside,outside)
tcp public_imp_address 5061 load_balancer_vip 5062 netmask 255.255.255.255
|
object network obj_host_load_balancer_vip # host routing_imp_private_address
object service obj_tcp_source_eq_5061
# service tcp source eq
5061
nat (inside,outside)
source static
obj_host_load_balancer_vip
obj_host_public_imp_ip_address service
obj_tcp_source_eq_5062
obj_tcp_source_eq_5061
|
Changes Required for IM and Presence Service Subscriber
|
Add a new access list for the load balancer virtual IP address. You must add an access list for each external domain that
IM and Presence Service needs to access.
|
access-list ent_lber_to_external_ocs extended
permit tcp host subscriber_private_ip_address host external_domain_public_ip_address 5061
access-list ent_lcs_to_lber_routg_imp extended
permit tcp host external_domain_public_ip_address host imp_public_ip_address 65061
|
Add a new access list for a extended permit tcp hosexternal domain to initiate messages to a IM and Presence Service server when the load balancer virtual IP address is in place. You must add an access list for each external domain that
needs to access IM and Presence Service.
|