This section outlines environmental requirements which are applicable to all aspects of the RealConnect Service, regardless of which Microsoft unified communications services are to be used. Additional requirements specific only to either Microsoft Teams or Skype for Business will be covered later in the applicable sections.
Microsoft Office 365
In order to utilize the Poly RealConnect Service a valid Microsoft Office 365 tenant is required and a user with the Global administrator role assigned. All topologies of Microsoft Exchange and Skype for Business are currently supported, as is Microsoft Teams.
The RealConnect Service is currently available globally to Microsoft Office 365 tenants homed in any country, with the following exceptions. Note this requirement only applies to the region that the tenant is homed in, not the user specifically. So, a tenant homed in North America can still utilize the service with users located in any region.
|RealConnect for |
|"cn", "China", "ru", "Russian Federation"|
|RealConnect for |
(Skype for Business)
|"cn", "China", "ru", "Russian Federation", "kp", "North Korea", "ao", "Angola", "bw", "Botswana", "cm", "Cameroon", "cp", "Cape Verde", "ci", "Côte d'Ivoire", "et", "Ethiopia", "gh", "Ghana", "ke", "Kenya", "mu", "Mauritius", "na", "Namibia", "ng", "Nigeria", "rw", "Rwanda", "sn", "Senegal", "tz", "Tanzania", "ug", "Uganda","zm", "Zambia"|
This section outlines IP communication requirements for network firewalls or standards-based video conferencing traversal solutions to successfully allow outbound calls from video endpoints to reach the various Microsoft Azure datacenter locations, where the Poly RealConnect Service resides.
If corporate security policies and/or existing firewall products support the use of DNS resolution against a DNS hostname, then this approach is preferred over manually managing a list of IP addresses.
Note: It may not be required to manually configure anything if the network where the endpoints reside, already allows outbound traffic to any host on the Internet over the required ports and protocols. If that is the case, then skip ahead to the Test Call section. If the test call fails then return here to validate the proper network communications are allowed.
There are three automatically updated DNS records which can be leveraged by firewall policies to allow traffic into the RealConnect Service:
- edge-teams.plcm.vc can be used to allow outbound calls with a dial string of @t.plcm.vc which are destined for the RealConnect Service for Microsoft Teams.
- edge-sfb.plcm.vc can be used to allow calls outbound calls with dial strings of @v.plcm.vc and @h.plcm.vc which are destined for the RealConnect Service for Skype for Business.
- edge-global.plcm.vc simply includes all IP addresses from both records shown above and should be used when leveraging the RealConnect Service for both Teams and Skype for Business.
The RealConnect Service currently resides in the following Azure datacenter regions and IP addresses:
|Azure Region Name||Azure Region ID||Microsoft Teams IP Addresses||Skype for Business IP Addresses|
|East US 2||AzureCloud.eastus2||188.8.131.52 |
|South Central US||AzureCloud.southcentralus||184.108.40.206 |
|West US 2||AzureCloud.westus2||220.127.116.11 |
|North Europe||AzureCloud.northeurope||18.104.22.168 |
|West Europe||AzureCloud.westeurope||22.214.171.124 |
|Australia Southeast||AzureCloud.australiasoutheast||126.96.36.199 |
As shown above the RealConnect Service is hosted on different IP addresses for supporting Teams meetings than for supporting Skype meetings. It is only necessary to allow connectivity to the set of addresses applicable to which service(s) are being utilized. When using IP addresses in firewall security policies it is recommended to add all addresses from all regions in this list to avoid potential call failures.
DNS queries performed against the DNS records listed in the previous section will often return additional IP addresses which are not included in the table above. Those addresses are assigned to staging and testing instances of the RealConnect service and under normal circumstances do not need to specifically be included in a firewall policy. Note: Be aware that when contacting Poly for customer support it may be requested to temporarily add some of those addresses to assist in troubleshooting.
Calls placed to the RealConnect Service from a standards-based video conferencing system will be directed via a geographic DNS response containing one of the bold IP addresses (which denotes the front-end load balancer for that region). For best performance, the DNS query response is based on a latency measurement performed by Azure Traffic Manager against the source of the DNS query performed by the calling endpoint or the endpoint’s registrar. This will direct the call to the available region with the lowest measured latency at the time of the call. Once the call is placed and reaches the service the front-end load balancer will immediately redirect the call to a different IP contained in the list above. This will typically be another IP address within the same region which received the call, yet it is possible to the call to be redirected to an IP address in a different region based on service availability at the time of the call.
Note: If for some reason it is desired to prevent a call from landing in an undesired geographical region then that can be accomplished by placing the desired regions on an "allow list" or placing the undesired regions on a "block list". Note that doing so would result in a failed call if it is initially directed or redirected to a blocked IP address.
In the event that additional addresses are added to the service, then that information is updated here as well as communicated directly to existing customers, who are subscribed to service alerts via the status.plcm.vc page. These IP addresses are static assignments and are rarely, if ever removed. Changes typically occur when the service is deployed into a new region or additional addresses are added to an existing region for increased scale.
Ports and Protocols
Configure any outbound firewall rules to match the settings listed below for the desired protocol(s).
|15001-16000||TCP||BFCP Content Sharing Media (Skype for Business Only)|
|20002-30001||UDP||Audio, Video, and BFCP Content Sharing Media|
|H.323||1719||UDP||H.255 RAS Signaling|
|20002-30001||UDP||Audio/Video/H.239 Content Sharing|
- For example, if only SIP calls are to be allowed then only the top ports in the table are needed (5060-5061, 15001-16000 TCP & 20002-30001 UDP)
- Alternatively, if only H.323 calls are to be allowed then the bottom half of the table is applicable (1719, 20002-30001 UDP & 1720, 10001-13000 TCP)
If the environment contains any video conferencing infrastructure components like Polycom DMA and RPAD then further configuration may be required to correctly route calls to the RealConnect Service. For detailed information about how to use the RealPresence DMA system, see the Polycom RealPresence DMA System Administrator Guide.
If the environment contains either Cisco endpoints and/or Cisco infrastructure components, then further configuration may be required to correctly route calls to the RealConnect Service.
Additionally, a Poly Cloud Relay virtual server will need to be deployed on-premises in order to support the Poly One Touch Dial (OTD) capability which is compatible with several Cisco’s native One Button to Push (OBTP) feature. It is recommended to perform the Cloud Relay deployment and configuration prior to advancing any further with the RealConnect Service configuration and license activation steps.
Verify the configuration settings on your Cisco TelePresence Video Communication Server (VCS). For detailed information about configuring the Cisco TelePresence Video Communications Server, see the Cisco support site.
Verify Zone Configuration
Within Cisco VCS verify the DNS and Traversal zones are Active and that either one or both SIP and H.323 are enabled (On).
Navigate to Configuration > Zones > Zones.
Verify the Status for both H.323 and SIP are On.
- Select DNS Zone and verify the State is Active.
- Select Traversal Zone and verify the State is Active.
Verify DNS Configuration
Verify that VCS can correctly resolve the
plcm.vc domain in order to route calls to the RealConnect service from registered endpoints.
Navigate to System > DNS.
Verify that at least one DNS server has been provided which can resolve the public
Cisco VTCs Configured with a H.323 Alias
Cisco VTCs should be configured with a H.323 Alias in order to place H.323 CVI calls to RealConnect Service.
Once the environment configuration is validated then place a test call from one or more video endpoints using either SIP or H.323 with the following dial string:
For example, if using a Poly Group Series endpoint connect to the device’s IP address using a web browser and then select the Place a Call menu. Expand Manual Dial, select the desired options, enter the test dial string, and then click Call.
If the call is successful, the following inbound video image should appear on the system’s monitor.
Also, select the Call Statistics button at the top of the page to confirm that both audio and video communications are each reporting successful transmit (TX) and receive (RX) channels.