I am running into an issue on a newly Skype for Business server. I am not able to communicate to other Skype for Business users that are using office 365. When I send a message from the internal user to the office 365 user I get an error that "The action couldn't be completed. Please try again later." When the office 365 user sends a message to the user that is using an on prem server they get an error that "this message wasn't sent to xxxx@xxxxxx.com due to company policy."

On the Office 365 end the Skype for Business administration page they have all domains accepted and are not blocking any. 

On the on-prem server I have I have the Sip providers for sipfed.online.lync.com listed as a hosted provider. External access policy for global and site is set to allow Federated user access, Remote user access, and Public Provider access. Under Sip federated domains I have the 365 users domain added to be allowed but they are still unable to communicate. 

Any assistance would be greatly appreciated. 

Hi

Did you add SRV record in public DNS ?

SRV: _sipfederationtls._tcp.contoso.com      A record: sip.contoso.com (Access Edge FQDN)

if added, try by removing office 365 user domain from allowed domains.

thanks 

Hi Sajeel,

That record was added and the allowed domain was removed. Still the same issue. 

• Edited by Cole Monsen 13 hours 24 minutes ago

Hi,

please check your external access policy to see if users are allowed to communicate with everyone using Lync online.

Its in Lync Control panel - federation and external access -external access policy and also sip federated providers - LyncOnline

Hi

Can you please confirm settings

in Lync control panel Federation and External access

External Access Policy following are checked

• Enable communication with federated users
• Enable communication with remote users

Access edge configuration

• Enable remote user access checked

Hi,

Under External Access Policy I have Federated users and remote user already enabled for communication as well as Access edge configuration, remote user access is enabled. 

• Edited by Cole Monsen 13 hours 0 minutes ago

Are you able to telnet on sipfed.online.lync.com port 5061 from your edge server and telnet from internet to your access edge IP on 5061 ?

 

Yes i am able to telnet from the edge server to sipfed.online.lync.com on port 5061 with no problems. I also was able to telnet into the IP of the server on port 5061.

Hi,

did a more carefully reading on your first post and noticed this:

"On the on-prem server I have I have the Sip providers for sipfed.online.lync.com listed as a hosted provider. "

You also have this stated

"Under Sip federated domains I have the 365 users domain added to be allowed "

As long as you have sipfed.online.lync.com listed as a hosted provider and permission is set to allow users to communicate with everyone using this provider,then you do not have to add them under Sip federated domains.

Reason for this is that you already have open federation for Lync online users.

To be sure they are Lync online users you can do the following in CMD:

nslookup sip.domain.com 8.8.8.8

If name is listed as sipdir.online.lync.com then they are Lync online users.

Try to remove one of those domains,publish topology and also enable-cscomputer (last one to be sure you dont get any error message)

Wait few minutes,then run this Lync powershell command:

Get-CsManagementStoreReplicationStatus

Check that your Edge server(s) has status:

 UpToDate           : True

Then remove one of users (from the domain you just removed) from your contact list (if you have any) and add them again as contact.Or you can enter their entire sip address in search field then press enter.Check if precense is working.

Hi Cole Monsen,

One thing that might be ignored. Have you enabled this provider ?

Best regards,

Eric