This is what routing group connectors are for. :-P

Regards,

Michael B. Smith
MCSE/Exchange MVP
http://TheEssentialExchange.com


-----Original Message-----
From: Oliver Marshall [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, January 09, 2008 6:51 AM
To: NT System Admin Issues
Subject: Exchange/VPN setup question

Hi chaps,

Can I toss over some thoughts with you ? 

Say I have two sites, Site A and B, each connected via a VPN. Each site has
a primary line (SDSL) and a backup line (ADSL). The VPN is setup on the
primary line, and when/if the backup line kicks in the VPN drops as the site
in question will be on a different IP.

Now, say that each site has one server running Windows 2003 with Exchange
2003. Each exchange install is in the same organisation. The MX record for
the domain (mydomain.com) points to SITEA which takes the email and routes
it to the correct mailbox, taking care of routing it over the VPN to the
other server if needed.

Ok, so, with this setup, if the VPN fails at either end, the email from
SITEA wont get to SITEB and vica-versa. Is there a way to get Exchange 2003
to 'fall back' to sending emails over the internet, perhaps using TLS for a
bit of security ?

I thought about specifying SMTP Connectors for each site, with the 'public'
route over the internet at a higher cost, but if I recall the connector
needs to be targeted to specific something (ie emails to a given domain or
sub domain etc). 

I've also thought about giving each site their own sub domain, so
[EMAIL PROTECTED] etc and having each subdomain assigned it's own MX,
so basically emails to [EMAIL PROTECTED] go to site A directly and
emails to [EMAIL PROTECTED] go directly to site B. Emails between
sites could be routed using DNS or a connector. However that then negates
the need for a VPN which is part of the project requirements.

Any suggestions on whether there is another way? Basically I'm trying to
rule out the need for a vpn firewall that supports multiple destination IP
addresses for the same VPN (ie supports SITE B being on either
xxx.xxx.xxx.xxx for the SDSL or yyy.yyy.yyy.yyy when on the ADSL); something
that will cost around £900 i reckon.

Olly

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!    ~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm>  ~


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!    ~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm>  ~

Reply via email to