Thanks Michael. Like I said, I think I've been too deep into the minutia.
It's good to know I'm not completely crazy.
As far as the Edge server, I've heard it both ways - one NIC, or two. If we do
go with just one NIC, which is publically facing, how do you setup routing to
get that traffic inside the firewall to the HT?
>>> "Michael B. Smith" 9/8/2011 7:04 PM >>>
Nothing obvious, but the devil is in the details.
Regards,
Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com
-Original Message-
From: Joseph Heaton [mailto:jhea...@dfg.ca.gov]
Sent: Thursday, September 08, 2011 5:21 PM
To: MS-Exchange Admin Issues
Subject: Setting up Exchange environment
Please bear with me on this one, I'm checking my sanity as much as anything
else:
We are moving from Groupwise to Exchange. I have my Exchange 2010 environment
setup (mostly). Here's how we're setup:
DMZ:
1) Edge Server for actual mail traffic. Our Edge server has 2 NICs. One
public IP, one internal IP. Edgesync is running to the internal IP.
2) TMG - will be used for OWA/Activesync access. *** Yes, I know I could
have had Edge role installed on the TMG box, but the TMG box is already
production, and we didn't during initial install.***
Internal:
1) 3 MB servers, setup in a DAG, with each server containing one database,
plus one copy of another server.
2) 2 HT/CAS servers, CAS using Microsoft Load Balancing for that role.
We have a wildcard cert that we're going to use for OWA/Activesync.
What I don't have setup yet:
1) TMG policy/listener for OWA. I need an IP for this, don't have one yet.
2) Send and receive connectors. We're going to be accepting mail for multiple
mail domains, and I have that setup under Accepted Domains, but I haven't got
the connectors yet. We're required to accept from/send to a specific third
party system (FOPE). I still need the specific IPs that will be used for that.
I've tested internally, and it works fine, however OWA access is giving me a
cert issue. I think it's not a "trusted" CA... we can iron that out pretty
easily, I think.
I can't test externally, as I don't have the external IPs yet, so it's a great
unknown at this point.
Question:
Am I missing anything? I think I may be too deep in this, and I'm worried that
I've overlooked something major.
Thanks,
Joe
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist