Jaa


How to Configure Edge without Edge Sync against Office 365

This is a quick guide on how to configure an Exchange 2010 Edge SP1 server to be used with Office 365 with out Edge Sync. The Exchange Deployment Guide also doesn't mention how to configure Edge with Office 365. Hopefully this article will help with this sort of configuration. A lot of these steps are similar to how you configure Office 365 for a Hub Transport Server. A 3rd party certificate is still required for the hybrid co-existence. In addition the reason we are running some of these commands on the Hub server is because the Hub server will NOT trust the Edge server since we are not doing Edge Sync we have to configure the Hub also in the same fashion we normally would with a O365 hybrid configuration.

Configuring the Edge Server

Configure the Accepted Domains

  1. New-AcceptedDomain -Name service.contoso.com -DomainName service.contoso.com -DomainType ExternalRelay
  2. New-AcceptedDomain -Name contoso.com -DomainName contoso.com -DomainType Authoritative

Configure the Remote Domains

  1. New-RemoteDomain "Inbound Remote Domain" -DomainName contoso.com
  2. New-RemoteDomain "Outbound Remote Domain" -DomainName service.contoso.com
  3. Set-RemoteDomain "Inbound Remote Domain" -TrustedMailInboundEnabled $True
  4. Set-RemoteDomain "Outbound Remote Domain" -TrustedMailOutboundEnabled $True -TargetDeliveryDomain $True

Configure the Receive Connector

  1. New-ReceiveConnector -Name "From Hub" -AuthMechanism ExternalAuthoritative -Fqdn mail.contoso.com -PermissionGroups AnonymousUsers,ExchangeServers,Partners -TlsDomainCapabilities mail.contoso.com:AcceptOorgProtocol -RemoteIPRanges <IP Address of Hub> -Bindings 0.0.0.0:25
  2. New-ReceiveConnector -Name "From Cloud" -Usage Internet -RemoteIPRanges <FOPE Outbound IP Addresses> -Bindings 0.0.0.0:25 -FQDN mail.contoso.com -TlsDomainCapabilities mail.messaging.microsoft.com:AcceptOorgProtocol
    1. FOPE IPS as of 11/08/11
      1. 12.129.20.0/24,12.129.199.61,12.129.219.155,63.241.222.0/24,65.55.88.0/24,94.245.120.64/26,206.16.57.70,207.46.51.64/26,207.46.163.0/24,213.199.154.0/24,213.199.180.128/26,216.32.180.0/24,216.32.181.0/24

Configure the Send Connector

  1. New-SendConnector "To Cloud" -RequireTLS $True -TlsAuthLevel DomainValidation -TlsDomain mail.messaging.microsoft.com -Fqdn mail.contoso.com -ErrorPolicies DowngradeAuthFailures -AddressSpaces SMTP:service.contoso.com
  2. New-SendConnector -Name "To Hub" -AddressSpaces SMTP:contoso.com -Fqdn mail.contoso.com -SmartHosts <IP Address of HUB> -UseExternalDNSServersEnabled $false -SmartHostAuthMechanism ExternalAuthoritative

Configuring the Hub Transport Server

Configure the Remote Domains

  1. New-RemoteDomain "Inbound Remote Domain" -DomainName contoso.com
  2. New-RemoteDomain "Outbound Remote Domain" -DomainName service.contoso.com
  3. Set-RemoteDomain "Inbound Remote Domain" -TrustedMailInboundEnabled $True
  4. Set-RemoteDomain "Outbound Remote Domain" -TrustedMailOutboundEnabled $True -TargetDeliveryDomain $True -AllowedOOFType InternalLegacy -AutoReplyEnabled $True -AutoForwardEnabled $True -DeliveryReportEnabled $True -NDREnabled $True -DisplaySenderName $True -TNEFEnabled $True

Configure the Receive Connector

  1. New-ReceiveConnector -Name "From Edge" -AuthMechanism ExternalAuthoritative -Fqdn mail.contoso.com -PermissionGroups ExchangeServers -RemoteIPRanges <IP Address from EDGE> -Bindings 0.0.0.0:25

Configure the Send Connector

  1. New-SendConnector -Name "To Edge" -AddressSpaces SMTP:service.contoso.com -Fqdn mail.contoso.com -SmartHosts <IP Address of EDGE> -UseExternalDNSServersEnabled $false -SmartHostAuthMechanism ExternalAuthoritative