Exchange Server Forums

failed to install edge role

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> Installation >> failed to install edge role

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

failed to install edge role - 6.Nov.2008 9:53:39 AM

hmidaissam

Posts: 14
Joined: 6.Nov.2008
Status: offline

first of all, sorry if i makes some mistakes in writing,
i have the reponsabilty to install Exchange 2007 in my company, i will install Hub, box letters and access client roles in the same server ( in the LAN in the server member of the AD), and in the DMZ i will install the edge role,
i have installed the first server in the LAN with succes,
my problem is the connexion betwenn the two server when i run the best practise tool in the edge server i have this error : the specified domain does'nt exit or can't be contacted,
and i run best practise tool at the first server, i can see the two server but the result of the test says that may be network problems denied acces to the edge server.

i have read that the edge role is optional an we can send and reveive mails into internet with the single server (the internal server), in that case i want to know how this solution is secure and if it's secure how can be deployed (for example the server still in the LAN or it can be placed in the DMZ (in this case what to do with the AD) or may be it's necessary to have two network cards one in the LAN the other in the DMZ,

any solutions or links is welcome
thank you for your help

Post #: 1

Featured Links*

RE: failed to install edge role - 6.Nov.2008 10:36:39 AM

de.blackman

Posts: 1482
Joined: 4.Apr.2005
From: Toronto, Canada
Status: offline

The edge transport can be deployed into the DMZ with a single NIC. This server role CANNOT be installed as part of your production domain (it must be in its own domain or workgroup). In order to obtain information about your exchange organization, a subscription must be made to an AD site that has a hub transport server. Edge transport stores encrypted, read-only information about your AD in its own database. This database is created and configured using ADAM (Active Directory Application Mode). A process called edgesync will replicate necessary exchange and AD related information from the hub transport server to the edge transport server (this is a one-way process from hub to edge and never the other way), making this a secured environment.

More details available at

http://technet.microsoft.com/en-us/library/aa997610.aspx
http://technet.microsoft.com/en-us/library/aa998012.aspx
http://www.msexchange.org/tutorials/Securing-Exchange-2007-Edge-Transport-Servers.html
http://techrepublic.com.com/2415-22_11-190647.html

Hope these help!

_____________________________

De BlackMan
List Moderator
"Did you backup your Information Store Today?!"

(in reply to hmidaissam)

Post #: 2

RE: failed to install edge role - 6.Nov.2008 11:32:31 AM

hmidaissam

Posts: 14
Joined: 6.Nov.2008
Status: offline

thank you de.blackman for your reponse, i inderstand very well
but in my case i have problems on installing the edge in fact the problem is the connexion between the two servers,

my question is : installing exchange on single server (without edge) with connectors configured locally at the hub server to send and receive mails to internet) is a secure solution ??

in fact i have seen this post :
http://www.msexchange.org/articles_tutorials/exchange-server-2007/migration-deployment/configuring-mail-flow-single-exchange-server-2007.html

i am trying to set up this solution and i am asked questions about the security of this solution

Thank you

< Message edited by hmidaissam -- 6.Nov.2008 11:35:42 AM >

(in reply to de.blackman)

Post #: 3

RE: failed to install edge role - 6.Nov.2008 3:34:15 PM

Elan Shudnow

Posts: 666
Joined: 4.Jan.2007
From: Chicago, IL
Status: offline

Well a secure solution is always relative to an organization's needs. What may be secure to some may not be secure to others.

I'd personally rather never have my internal servers talk directly to the internet and always implement some type of solution such as Exchange Hosted Services, Postini, Ironport, Barracuda, etc.. These devices/services will do all your scanning and then send it to your internal environment. Heck, you can have both Exchange Hosted Services and an Ironport so the Hosted Services don't send directly to your environment and you have added antispam/antivirus protection.

_____________________________

Elan Shudnow
Exchange MVP
http://www.shudnow.net

(in reply to hmidaissam)

Post #: 4

RE: failed to install edge role - 7.Nov.2008 7:41:09 AM

hmidaissam

Posts: 14
Joined: 6.Nov.2008
Status: offline

In that case can you helping me resolving the problem of connexion between Internal Exchnage Server (HUB, Mail box , access client roles) and the edge :

each server is installed , i have create and send connectors , but the two servers can't communicate.

when i run the best practize tool in the edge server, he says that the specified domain doesn't exist.

the HUb is in the "lan.domain-name" and the zdge is in the DMZ with WORKGROUP.

thank you for your help

(in reply to Elan Shudnow)

Post #: 5

RE: failed to install edge role - 7.Nov.2008 7:53:09 AM

Exchange_Geek

Posts: 1026
Joined: 31.Dec.2006
Status: offline

Do you valid ports opened for Edge to communicate with Hub ?
Is ADAM installed on this Edge box ?

(in reply to hmidaissam)

Post #: 6

RE: failed to install edge role - 7.Nov.2008 7:53:12 AM

Elan Shudnow

Posts: 666
Joined: 4.Jan.2007
From: Chicago, IL
Status: offline

Make sure the ports are open. You can see what ports are needed here:
http://technet.microsoft.com/en-us/library/bb331973.aspx

Try doing a Start-Edgesynchronization

If none of that works, try re-subscribing. If that doesn't work, try turning up Diagnostic Logging.

_____________________________

Elan Shudnow
Exchange MVP
http://www.shudnow.net

(in reply to hmidaissam)

Post #: 7

RE: failed to install edge role - 7.Nov.2008 7:55:19 AM

Elan Shudnow

Posts: 666
Joined: 4.Jan.2007
From: Chicago, IL
Status: offline

quote:

ORIGINAL: Exchange_Geek
Is ADAM installed on this Edge box ?

Hm, I don't think the Edge Role will even install at all unless ADAM is even installed.

_____________________________

Elan Shudnow
Exchange MVP
http://www.shudnow.net

(in reply to Exchange_Geek)

Post #: 8

RE: failed to install edge role - 7.Nov.2008 8:05:21 AM

Exchange_Geek

Posts: 1026
Joined: 31.Dec.2006
Status: offline

Ooops that was a pre-req while installation, slipped my mind.

(in reply to Elan Shudnow)

Post #: 9

RE: failed to install edge role - 12.Nov.2008 10:09:04 AM

hmidaissam

Posts: 14
Joined: 6.Nov.2008
Status: offline

I return to you about my mistake,
actually after a few tests, I think there is not
errors at the network connection:
when I create a new domain accepted, and I
run start-EdgeSynchronization at the HUB.
At the Edge, in the areas accepted domains,
i can well see the domain added.

But I always errors when I run the tool
Best practize at the EDGE, it takes a message
Error

[image]http://www.box.net/shared/nnjouaypka[/image]

Basically, he said that the specified domain can not be
contacted.

Thank you for your help

(in reply to Elan Shudnow)

Post #: 10

RE: failed to install edge role - 14.Nov.2008 9:11:56 AM

hmidaissam

Posts: 14
Joined: 6.Nov.2008
Status: offline

i can now send mail from an account in the LAN to the internet with the edge, but i can't understand why i still have the error i described, if you can help me, i will be grateful.

(in reply to hmidaissam)

Post #: 11