Teach you to build LyncServer2013. Office Web App Server (12)

In the previous article, we have completed the deployment of the Office Web App Server and have already implemented PowerPoint and OneNote sharing within the organization, but we are still unable to share the PPT with external users and can only implement simple IM and conferencing, So in order to share PPT and OneNote externally, we need to publish our office Web App server to the public, but since I have only one public IP address now, because we are publishing a reverse proxy server, we have already occupied the IP address of the public network 443 port, Our Office Web App server also needs to use 443 ports on the public network, so we re-use Microsoft's TMG today to publish our Office Web App server, our WAC server, Because the certificate that we used in the reverse proxy server that we previously published on the TMG server came from the front-end server LYNVFE01 server certificate, and when we requested the front-end server certificate, In the name of the user has been added LyncWAC.iSusan.cn this domain name, so we do not need to create a WAC server in addition to the love 443 port of the listener, because we published the reverse proxy has been created, the following we began to publish our WAC server to the public network, so that the external network users can pass After the Lync client shares ppt, not only we can share PPT on the external Lync client, our Lync Web app user can still use PPT to share.

First, come to our TMG server, right-click "Firewall Policy"--new--and web site publishing rules

650) this.width=650; "Width=" 720 "height=" 541 "title=" 01.png "style=" width:720px;height:541px; "src="/HTTP/ S3.51cto.com/wyfs02/m02/42/fc/wkiol1pzbfycepgcaau32vbsuoi301.jpg "border=" 0 "vspace=" 0 "hspace=" 0 "alt=" Wkiol1pzbfycepgcaau32vbsuoi301.jpg "/>

Type the name of the WAC server that we need to publish for easy identification, I enter "Publish WAC" here

650) this.width=650; "title=" 02.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/42/FC/ Wkiol1pzbfyj36j7aag3omdfgna543.jpg "alt=" Wkiol1pzbfyj36j7aag3omdfgna543.jpg "/>

Select Publish a single Web site or load Balancer

650) this.width=650; "title=" 03.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/42/FB/ Wkiom1pza0kzjmemaah1tgqadtk743.jpg "alt=" Wkiom1pza0kzjmemaah1tgqadtk743.jpg "/>

Select Use SSL to connect to a published Web server or server farm

650) this.width=650; "title=" 04.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/42/FC/ Wkiol1pzbfyapfddaahzfd7w7fm535.jpg "alt=" Wkiol1pzbfyapfddaahzfd7w7fm535.jpg "/>

Enter the internal FQDN:LyncWac.iSuan.cn of the WAC server

650) this.width=650; "title=" 05.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M02/42/FB/ Wkiom1pza0pbqs5paahsypi61ka473.jpg "alt=" Wkiom1pza0pbqs5paahsypi61ka473.jpg "/>

Path is/*, and tick "forward the original host header instead of the actual host header specified in the Internal site name field of the previous page"

650) this.width=650; "title=" 06.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/42/FC/ Wkiol1pzbf2iwyczaagtw8myvt8246.jpg "alt=" Wkiol1pzbf2iwyczaagtw8myvt8246.jpg "/>

As I was planning, the same name was used internally and externally

650) this.width=650; "title=" 07.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/42/FB/ Wkiom1pza0ogc-2haagjeuxg-ro848.jpg "alt=" Wkiom1pza0ogc-2haagjeuxg-ro848.jpg "/>

Select the 443 listener previously created for the reverse proxy and click Next

650) this.width=650; "title=" 08.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M02/42/FC/ Wkiol1pzbf2bpgt2aafsupgy02w073.jpg "alt=" Wkiol1pzbf2bpgt2aafsupgy02w073.jpg "/>

Here Select "No delegation, but client can authenticate directly"

650) this.width=650; "title=" 09.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/42/FB/ Wkiom1pza0otc1bsaagkb_ficek565.jpg "alt=" Wkiom1pza0otc1bsaagkb_ficek565.jpg "/>

650) this.width=650; "title=" 10.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/42/FC/ Wkiol1pzbf2q97dkaaeb3z16mg8320.jpg "alt=" Wkiol1pzbf2q97dkaaeb3z16mg8320.jpg "/>

650) this.width=650; "title=" 11.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M02/42/FB/ Wkiom1pza1vz23doaahyu3vixnu115.jpg "alt=" Wkiom1pza1vz23doaahyu3vixnu115.jpg "/>

After clicking Done, in the TMG firewall policy, right-click the publishing rule you just created, select Properties, switch to the "to" tab, make sure "forward the original host header instead of the actual host header specified in the Internal site Name field" and select "request display as from Forefront TMG Computer"

650) this.width=650; "title=" 12.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/42/FC/ Wkiol1pzbhxttmwnaahh2fwt7tw331.jpg "alt=" Wkiol1pzbhxttmwnaahh2fwt7tw331.jpg "/>

Then switch to the "Communications" tab, click "Filter", configure the HTTP

650) this.width=650; "title=" 13.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/42/FB/ Wkiom1pza1ucrgzhaafbnrmrcek148.jpg "alt=" Wkiom1pza1ucrgzhaafbnrmrcek148.jpg "/>

Remove the √ before "verify regularization"

650) this.width=650; "title=" 14.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M02/42/FC/ Wkiol1pzbhxcjw7laaf6ioqw2ea537.jpg "alt=" Wkiol1pzbhxcjw7laaf6ioqw2ea537.jpg "/>

Click OK, and apply TMG policy, to this, WAC server in TMG has completed, below we also need to add a record to the public network DNS, LYNCWAC point to our public IP address, add to the completion, we can share PPT and OneNote in the public network! Testing in IE and Google browser is good, when you use Lync Web app, you will be prompted to install the plugin, click on the installation can be used!

This article from "Robin's Home" blog, declined reprint!