How to Configure Edge without Edge Sync against Office 365
This is a quick guide on how to configure an Exchange 2010 Edge SP1 server to be used with Office 365 with out Edge Sync. The Exchange Deployment Guide also doesn't mention how to configure Edge with Office 365. Hopefully this article will help with this sort of configuration. A lot of these steps are similar to how you configure Office 365 for a Hub Transport Server. A 3rd party certificate is still required for the hybrid co-existence. In addition the reason we are running some of these commands on the Hub server is because the Hub server will NOT trust the Edge server since we are not doing Edge Sync we have to configure the Hub also in the same fashion we normally would with a O365 hybrid configuration.
Configuring the Edge Server
Configure the Accepted Domains
- New-AcceptedDomain -Name service.contoso.com -DomainName service.contoso.com -DomainType ExternalRelay
- New-AcceptedDomain -Name contoso.com -DomainName contoso.com -DomainType Authoritative
Configure the Remote Domains
- New-RemoteDomain "Inbound Remote Domain" -DomainName contoso.com
- New-RemoteDomain "Outbound Remote Domain" -DomainName service.contoso.com
- Set-RemoteDomain "Inbound Remote Domain" -TrustedMailInboundEnabled $True
- Set-RemoteDomain "Outbound Remote Domain" -TrustedMailOutboundEnabled $True -TargetDeliveryDomain $True
Configure the Receive Connector
- New-ReceiveConnector -Name "From Hub" -AuthMechanism ExternalAuthoritative -Fqdn mail.contoso.com -PermissionGroups AnonymousUsers,ExchangeServers,Partners -TlsDomainCapabilities mail.contoso.com:AcceptOorgProtocol -RemoteIPRanges <IP Address of Hub> -Bindings 0.0.0.0:25
- New-ReceiveConnector -Name "From Cloud" -Usage Internet -RemoteIPRanges <FOPE Outbound IP Addresses> -Bindings 0.0.0.0:25 -FQDN mail.contoso.com -TlsDomainCapabilities mail.messaging.microsoft.com:AcceptOorgProtocol
- FOPE IPS as of 11/08/11
- 12.129.20.0/24,12.129.199.61,12.129.219.155,63.241.222.0/24,65.55.88.0/24,94.245.120.64/26,206.16.57.70,207.46.51.64/26,207.46.163.0/24,213.199.154.0/24,213.199.180.128/26,216.32.180.0/24,216.32.181.0/24
- FOPE IPS as of 11/08/11
Configure the Send Connector
- New-SendConnector "To Cloud" -RequireTLS $True -TlsAuthLevel DomainValidation -TlsDomain mail.messaging.microsoft.com -Fqdn mail.contoso.com -ErrorPolicies DowngradeAuthFailures -AddressSpaces SMTP:service.contoso.com
- New-SendConnector -Name "To Hub" -AddressSpaces SMTP:contoso.com -Fqdn mail.contoso.com -SmartHosts <IP Address of HUB> -UseExternalDNSServersEnabled $false -SmartHostAuthMechanism ExternalAuthoritative
Configuring the Hub Transport Server
Configure the Remote Domains
- New-RemoteDomain "Inbound Remote Domain" -DomainName contoso.com
- New-RemoteDomain "Outbound Remote Domain" -DomainName service.contoso.com
- Set-RemoteDomain "Inbound Remote Domain" -TrustedMailInboundEnabled $True
- Set-RemoteDomain "Outbound Remote Domain" -TrustedMailOutboundEnabled $True -TargetDeliveryDomain $True -AllowedOOFType InternalLegacy -AutoReplyEnabled $True -AutoForwardEnabled $True -DeliveryReportEnabled $True -NDREnabled $True -DisplaySenderName $True -TNEFEnabled $True
Configure the Receive Connector
- New-ReceiveConnector -Name "From Edge" -AuthMechanism ExternalAuthoritative -Fqdn mail.contoso.com -PermissionGroups ExchangeServers -RemoteIPRanges <IP Address from EDGE> -Bindings 0.0.0.0:25
Configure the Send Connector
- New-SendConnector -Name "To Edge" -AddressSpaces SMTP:service.contoso.com -Fqdn mail.contoso.com -SmartHosts <IP Address of EDGE> -UseExternalDNSServersEnabled $false -SmartHostAuthMechanism ExternalAuthoritative