Hi,

I have upgraded our organization to Skype for Business Server.

The network has many locked down client VLANs and the network team are not too happy about opening ports 1024-65535.

I wish to achieve 2 goals here:

1) Lock down that port range between client VLAN
2) We are not using QoS but whilst I am doing this exercise, it would be worthwhile designing with QoS in mind, so if we do want to implement QoS then we already have the ports nailed down.

I was planning on the below and asking the network team to open ports 40,000 - 40,199 between client VLANs:

Client Ports:

App Sharing - 40,000 - 40,039
Audio - 40,040 - 40,040
Video - 40,080 - 40,119
File Transfer - 40,120 - 40,159
Dynamic SIP - 40,160 - 40,199

Server Ports - ConferenceServer:

Application Sharing - 40,000 - 40,127
Audio - 40,128 - 40,255
Video - 40,256 - 40,511

Server Ports - ApplicationServer:

Application Sharing - 40,000 - 40,127
Audio - 40,128 - 40,255
Video - 40,256 - 40,511

How does that look? Would you say that satisfies my requirements for now? I read that you shouldn't really modify the Edge server ports from the 50,000 range and we don't have enterprise voice (Yet! It is coming :-) )

Any help massively appreciated