Messaging and Colloboration

Sunday, 7 August 2016

Unified Messaging SCOM Alerts in Exchange 2013

UM  SCOM alert in Exchange 2013

UM.Protocol health set unhealthy (MediaEstablishedFailedMonitor) - Exchange Server Alert: The UM.Protocol Health Set detected  is unhealthy. - The A/V Edge service is misconfigured or isn''t operating correctly
Knowledge Base: http://technet.microsoft.com/en- us/library/ms.exch.scom.UM.Protocol(EXCHG.150).aspx?v=15.0.1178.4 - Date raised in SCOM: 2016-08-03T13:59:18

 

For these types of SCOM Alert, the very first action we have to take is launching Event viewer or Powershell. Here I am using Powershell to dig deep into the event logs. If you know which event log provider is responsible for logging UM events, then it’s very easy to use Powershell to get all UM related events.

Hint: ‘MSExchange Unified Messaging’

I am using Get-WinEvent cmdlet instead of its predecessor Get-EventLog (for easy filtering).

Get-WinEvent  -ProviderName  "MSExchange Unified Messaging"  -MaxEvents 30

The above cmdlet retrieves the most recent 30 events belonging to MSExchange Unified Messaging services.
So the next step is to search for twin sister events 1692, 1438. If twin sisters are there, Game Over!
Just try to get more details about Event ID 1692 & 1438. Event 1692 is very calm, she won’t give you much detail, but 1438 is chatterbox, even she will tell you what exactly needs to do to fix this alert.
Normally there are some limitations that holds you back when you are examining nuts and bolts on events in Powershell like you can’t read full message given by events, messages generated by UM events are bit lengthy when compared to other Events, so we can use formatting options like        Out-String along with ‘Width’ parameter.

Get-WinEvent  -FilterHashtable  @{ logname = 'application' ; id=1438 }  -MaxEvents 20 |ft message | Out-String  -Width 600

Output:
“The Microsoft Exchange Unified Messaging service on the Mailbox server has been configured to automatically use the Lync Server A/V Edge resources associated with ‘SFBEdgePool.domain.com:5061'. Inbound and outbound calls involving remote users (located outside the enterprise) might be failing using the current Lync Server A/V Edge resources. To correct the issue, set the SIPAccessService property using the Set-UMService cmdlet. The Microsoft Exchange Unified Messaging service will start using the Lync Server A/V Edge resources corresponding to the new value.”


So it’s clear that something needs to be tweaked from Exchange UM configuration . Normally these types of SCOM alert triggers on post migration situations mostly from Lync server 2013 to SFB 2015, what exactly triggers this SCOM alert is when Exchange server UM services were trying to communicate with legacy Lync Edge server pool.

How to make Exchange aware of that new configuration change? By running some cmdlets we can confirm that Exchange doesn’t have updated information.

Get-UMService | Select Name, Status, SIPAccessService
The above cmdlet will give output like this

Name            Status SIPAccessService
----            ------ ----------------
Ucpro001  Enabled
Ucpro002  Enabled
Ucpro003  Enabled
Ucpro004  Enabled
Ucpro005  Enabled
Ucpro006  Enabled

Here ‘Name’ column is nothing but your Exchange server (technically mailbox server), Status ‘enabled’ means it has been enabled for Unified messaging. But the most anticipated column ‘SIPAccessService’ is empty. If it is empty then, we can say exchange is unaware of new configurations. We could directly assign new Lync/SFB Edge server configuration to all our UM enabled Exchange servers.
But the question here is why Exchange needs Lync/SFB edge server pool address assigned?? Because users from outside network must use the closest Edge server pool for seamless RTP (Real time Transport Protocol) media traffic.

Once SDP negotiation is complete, RTP is used to send voice data back and forth between UM server and PBX or other UM server. RTP is merely a format for carrying audio and video data between endpoits, using dynamically assigned set of TCP and UDP ports.

The following cmdlet is used to assign SIPAccessService to UMServices.

Get-UMService | Set-UMService –SIPAccessService SFBEdgePool.domain.com :5061
It’s good to restart UM Servers after assigning SIPAcessService.

Set-UMService will accept the following parameters,
            - Identity
            - Dialplans – it specifies all dial plan that UM services handles incoming calls for
            - IPAddressFamily – it specifies whether UM IP Gateway will use IPV4 or IPV6 or both
-MaxCallsAllowed – Max no.of concurrent calls allowed that UM services allows,        default:   100
            - UMStartupMode – it specifies star up mode for UM services. [TCP, TLS, Dual]
            - SIPAccessService*  - it specifies FQDN and TCP port number for the nearest Lync/SFB server for the inbound and outbound calls from remote users located outside the network.

             *When this parameter is not set (in a multi-pool environment), then Exchange UM service may select a Lync/SFB pool that is not closest geographically to the remote user. It’s optional in single pool environment. This parameter is set on a per-Unified Messaging service basis and must point to the Lync/SFB pool that is located the closest geographically to the Exchange server.



No comments:

Post a Comment