# reverse proxy skype for business AX1030

**URL:** https://community.a10networks.com/t/reverse-proxy-skype-for-business-ax1030/464
**Category:** ADC - Application Delivery
**Tags:** slb-adc
**Created:** [August 24, 2017, 8:28pm UTC](https://community.a10networks.com/t/reverse-proxy-skype-for-business-ax1030/464 "2017-08-24T20:28:23Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![abqureshi](https://avatars.discourse-cdn.com/v4/letter/a/53a042/32.png) [@abqureshi](https://community.a10networks.com/u/abqureshi)
#### Post date: [August 24, 2017, 8:28pm UTC](https://community.a10networks.com/t/reverse-proxy-skype-for-business-ax1030/464/1 "2017-08-24T20:28:23Z")

</div>

Hi,

I’m hoping someone can direct me to a guide or blog that can help me setup a reverse proxy instance for our on-prem Skype for Business setup. I found an older guide for the AX series, but it’s for lync running on windows server 2008. I recently upgraded to Skype4Bus 2015 & it’s running on windows server 2012 STD 64-bit. I followed that guide but I’m still having issues with some of the features not working.

Thanks for any help you can offer,

Abdul

---

<div class="post-metadata">

### Author: ![oaguilar](https://avatars.discourse-cdn.com/v4/letter/o/aeb1de/32.png) [@oaguilar](https://community.a10networks.com/u/oaguilar)
#### Post date: [August 24, 2017, 9:34pm UTC](https://community.a10networks.com/t/reverse-proxy-skype-for-business-ax1030/464/2 "2017-08-24T21:34:37Z")

</div>

Have you checked out this one?:  
[https://www.a10networks.com/resources/deployment-guides/microsoft-skype-for-business-server-2015](https://www.a10networks.com/resources/deployment-guides/microsoft-skype-for-business-server-2015)

---

<div class="post-metadata">

### Author: ![abqureshi](https://avatars.discourse-cdn.com/v4/letter/a/53a042/32.png) [@abqureshi](https://community.a10networks.com/u/abqureshi)
#### Post date: [August 24, 2017, 9:37pm UTC](https://community.a10networks.com/t/reverse-proxy-skype-for-business-ax1030/464/3 "2017-08-24T21:37:51Z")

</div>

I did see that one, but wasn’t sure it would work since it’s for the Thunder ADC & we have an AX1030.

---

<div class="post-metadata">

### Author: ![oaguilar](https://avatars.discourse-cdn.com/v4/letter/o/aeb1de/32.png) [@oaguilar](https://community.a10networks.com/u/oaguilar)
#### Post date: [August 24, 2017, 10:07pm UTC](https://community.a10networks.com/t/reverse-proxy-skype-for-business-ax1030/464/4 "2017-08-24T22:07:57Z")

</div>

AX1030 supports 2.7.2-P11 (at this day), and 2.7.2-P10 or 2.7.2-P11-SP1 is the recommended version for non-fpga devices like Thunder 1030S and AX1030 so you should not have problems running it (for ADC)

If you are using the recommended 2.7.2-P10 or P11-SP1 version, even that the GUI interface is different, and the deployment guide was tested on 4.x, there’s a good chance that you should be able to configure it with out any problems (some commands changed from 2x to 4x, so search in the documentation if you get stuck), I reviewed the DG very fast, and most the Virtual Servers and objects that you have to create, are simple (L4 TCP, L4 UDP) even the aFlex is simple, give it a try, It should work (even the DDoS section should work).

Good Luck  
Oscar Aguilar

---

<div class="post-metadata">

### Author: ![dshin](https://avatars.discourse-cdn.com/v4/letter/d/f05b48/32.png) [@dshin](https://community.a10networks.com/u/dshin)
#### Post date: [November 8, 2017, 1:27am UTC](https://community.a10networks.com/t/reverse-proxy-skype-for-business-ax1030/464/5 "2017-11-08T01:27:43Z")

</div>

My suggestion would be to go on the back of the deployment guide and there are sample configs for each segment of the Skype deployment. In 2.7 there are minor differences in the CLI which is Port:80 (2.7) and Port 80(4.1). Command lines in 2.7 and 4.x has it different which is an easy change. Interface, vlan and the rest will be the same. To make things easier use a textpad+ and change the IP address accordingly from the configs from the guide based on your Skype details.Heres a sample config for reverse proxy:

Reverse Proxy

```auto
ip anomaly-drop packet-deformity layer-3
ip anomaly-drop packet-deformity layer-4
ip anomaly-drop security-attack layer-3
ip anomaly-drop security-attack layer-4
ip anomaly-drop bad-content 10

```

ip anomaly-drop frag

```auto
ip anomaly-drop ip-option
ip anomaly-drop land-attack
ip anomaly-drop out-of-sequence 10
ip anomaly-drop ping-of-death
ip anomaly-drop tcp-no-flag
ip anomaly-drop tcp-syn-fin
ip anomaly-drop tcp-syn-frag
ip anomaly-drop zero-window 10

```

!  
vlan 106  
&nbsp;&nbsp;untagged ethernet 3  
&nbsp;&nbsp;router-interface ve 106  
!  
vlan 110  
&nbsp;&nbsp;untagged ethernet 2  
&nbsp;&nbsp;router-interface ve 110  
!  
hostname ReverseProxy  
!  
interface management

```auto
  ip address 10.100.2.134 255.255.255.0
  ip default-gateway 10.100.2.1

```

enable  
!  
interface ethernet 1  
!  
interface ethernet 2  
&nbsp;&nbsp;enable  
!  
interface ethernet 3  
&nbsp;&nbsp;enable  
!  
interface ve 106  
&nbsp;&nbsp;ip address 10.0.6.201 255.255.255.0  
!  
interface ve 110  
&nbsp;&nbsp;ip address 192.0.3.201 255.255.255.0  
!  
!  
ip route 0.0.0.0 /0 192.0.3.254  
!  
ip route 10.0.2.0 /24 10.0.6.254  
!  
ip route 10.0.3.0 /24 10.0.6.254  
!  
ip route 10.0.5.0 /24 10.0.6.254  
!  
health monitor HM  
!  
slb template persist source-ip RP  
!  
slb template server-ssl RP-Server-SSL  
&nbsp;&nbsp;ca-cert InternalRootCA  
!  
slb server OOS-Internal-VIP 10.0.3.125  
&nbsp;&nbsp;port 443 tcp  
!  
slb server Skype-Internal-VIP 10.0.3.123  
&nbsp;&nbsp;port 4443 tcp  
!  
slb service-group OOS-443 tcp  
&nbsp;&nbsp;method least-connection  
&nbsp;&nbsp;health-check HM  
&nbsp;&nbsp;member OOS-Internal-VIP 443  
!  
slb service-group Skype-4443 tcp  
&nbsp;&nbsp;method least-connection  
&nbsp;&nbsp;health-check HM  
&nbsp;&nbsp;member Skype-Internal-VIP 4443  
!  
slb template client-ssl CSSL1  
&nbsp;&nbsp;cert SSL\_Cert  
&nbsp;&nbsp;key SSL\_Key pass-phrase encrypted  
yKfJxqgqJak8EIy41dsA5zwQjLjV2wDnPBCMuNXbAOc8EIy41dsA5zwQjLjV2wDn  
!  
slb virtual-server RP\_VIP 192.0.3.108  
&nbsp;&nbsp;port 443 https  
&nbsp;&nbsp;&nbsp;&nbsp;aflex Skype-OOS-Selection  
&nbsp;&nbsp;&nbsp;&nbsp;source-nat auto

```auto
    service-group Skype-4443
    template server-ssl RP-Server-SSL

```

template client-ssl CSSL1  
!  
end

Genard

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex002/uploads/a10_community/original/1X/bb9f186d33804d3044a0374e589f49fdf3be1328.png) [@system](https://community.a10networks.com/u/system)
#### Post date: [May 14, 2018, 5:55pm UTC](https://community.a10networks.com/t/reverse-proxy-skype-for-business-ax1030/464/6 "2018-05-14T17:55:46Z")

</div>

That works.
