Oh nice, thanks very much for the help. Well now I get a : 882 Status : 401 Unauthorized Seems to be an authentication problem. I don't think that Brekeke could auhtenticate via Kerberos or TLS-DSK (Lync only protocol ?) but maybe there's a chance with NTLM However, here's a full packet : http ...

Here's the INVITE packet :

http://txtup.co/Eochf

Yes its Via header indicates the Brekeke IP's address, even two times, UDP & TCP.

Anyway, I think the problem is on the Lync side where I'm really not sure what to do between put a PSTN or Trusted Pool or both. I keep on trying

Great!!! Just got a license! I'll try it & let you know

Alright ok, it's clear now. I was confused by the fact that you can select advanced version and download on Brekeke's site.

Anyway, I've asked for an advanced evaluation version.
I had asked an academic version at the very begining, never had an answer, I hope it won't be the same this time.

Well, I had some tricky moves when I've uploaded several certs / keys before trying your solution. So I'm reinstalling the server to see what I can get from that. Glad to know it works under evalution. To be very clear, when you've uploaded key & cert and restarted your server, did TLS showed up in ...

I've followed that from Cisco's board and adapted it : 1) Have you enabled TCP connections on Lync? If not, do this first: Set-CsRegistrar "registrar:pool.your-domain.com" -SipServerTcpPort 5060 set-CsMediaConfiguration -EncryptionLevel supportencryption 2) Make sure that IP of VCS (not FQDN) is ...

I've changed the port by changing the dialplan :

To = sip:+%1@192.168.0.141:5050

Now the INVITE is sent to Lync, the error I get is :

486 Status : 400 Missing correct Via header

Actually the INVITE is not even re-routed, it could be a matter of port, I'm trying to edit the dialplan.

For now, I got nothing in the log, I'm still trying to configure it. What I got with Wireshark is an incorrect header checksum : http://postimage.org/image/d9mlkq7np/ (192.168.0.141 : Lync 2010 / 192.168.0.130 : Brekeke SIP Server) Here's the full exchange : http://postimage.org/image/b7munj3yh ...

Thanks you both, yeah I had pretty much the same settings but with the hostname instead of the IP.

Harold, I've followed your OpenSSL commands, I still can't see that TLS appear. Maybe evaluation version doesn't handle TLS finally.

I'm trying the diagnostic commands to see if it is working anyway.

Well I'm actually using an evaluation version that, as you said, states that only advanced version handles TLS.

But as I was able to activate TLS, upload certificate /key... I guessed that it was allowed for evaluation :

http://i45.tinypic.com/2uojvr8.png

1. Brekeke Product Name and version: Brekeke SIP Server , Version 3.0.6.3 Evaluation 2. Java version: 1.7.0 3. OS type and the version: Windows Server 2008 Standard Edition 4. UA (phone), gateway or other hardware/software involved: OpenSSL 5. Network pattern: 1 6. Your problem: Hi! I'm trying to ...

Thanks for both answers.

For "$continue=true" rule, well I'm not sure, I've followed instructions from : http://wiki.brekeke.com/wiki/Configure- ... er-for-OCS

I've implemented the rule for logs, I'll try to log that decline as soon as I can.

1. Brekeke Product Name and version: Brekeke SIP Server , Version 3.0.6.3 Evaluation 2. Java version: 1.7.0 3. OS type and the version: Windows Server 2008 Standard Edition 4. UA (phone), gateway or other hardware/software involved: Lync 2010 5. Network pattern: 1 6. Your problem: Hi! I'm testing ...