Mark
Mon May 30 02:19:15 CDT 2005
On Sun, 29 May 2005 19:34:37 +0200, "Slimard" <slimobeny@hotmail.com>
wrote:
>Hi,
>
>We are in the process of designing a new Single Exchange 2003.
>Currently, 5 business units in five different locations across Europe
>connected throuh VPN (1 mbits). Each location has 800 mailboxes, 1 Exchange
>server. The network topology is Hub and Spoke: 2 locations are main, and the
>main location connect to other location.
>1) What are the ports to be open to allow traffic between Exchange 2003
>servers?
If you're using a VPN then everything is tunneled inside that service,
whatever the tcp/udp ports are for that. You don't open anything else
up outside that tunnel port.
>2) If the main locations do not support VPN routing, how the internal mail
>will flow?
If the locations don't support VPN then you need to create an island.
TCP 25 is the only real option to transfer mail between the two.
There is of course the issue of AD replication across firewall's,
discussed:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerWhitepapers/C48C97E8-1C7B-4584-BC0D-59017DEEBE8A.mspx
You may well find that it's better to run that site as an entirely
independent location and follow Al's advice regarding email access.
That would entail removing the mail server from that location and
placing it centrally (migrating mail from that box onto a central one
and then leaving yourself with a spare box)
All that said, I can't see why any location would not support VPN.
There is also the option of an SSL based VPN solution. Neoteris
(Juniper) were the leaders in this field but are now being overtaken
by much more clever jonnies.
>
>thanks in advance
>