Cisco PIX 525 Dokumentacja Pobierz pdf (Strona 430)

C-4

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Appendix C MS-Exchange Firewall Configuration

Configuring Both Systems After Rebooting

Step 3 Establish a trusted, trusting relationship between the inside server’s domain, pixin and the outside

server’s domain, pixout.

a. Click Start>Programs>Administrative Tools>User Manager for Domains.

b. Click Policies>Trust Relationship, and click Trusting Domain.

c. Add a trusting domain for the outside server’s domain and assign a password to it.

d. Establish a trusted domain for pixout by clicking Trusted Domain.

Step 4 Exit the application and reboot the Windows NT system.

Configuring Both Systems After Rebooting

After rebooting, follow these steps to configure both the inside and outside servers:

Step 1 After the systems are usable, on the inside server, click Start>Find>Computer and look up the outside

server, in this case, by entering

\\outserver. Then go to the outside server and find inserver.

Step 2 On each server, configure Microsoft Exchange by clicking Start>Programs>Microsoft Exchange

Administrator to connect to the other server. Declare a network name, in this case, CISCO on both

servers. On each server, declare the site name to be the respective server’s domain name. In this case, on

the inside server, the site name is pixin. On the outside server, it is pixout.

Click File>Connect to Server to connect to the other server.

Step 3 From the Administrator application, configure the site connector. Double-click your site name in the

Configure/Connections field and the Connections list appears. Ensure you have a site connector

installed. If you followed the defaults when you installed Microsoft Exchange, this should be present. If

not, add the site connector for the server’s respective domains, just as you did in Step 2. For the cost, use

the default. For the Messaging Bridge Head, use the name of that server. For the Target Server, use the

name of the other server. You can ignore the Address Space field.

Step 4 Once both sites are connected, the Administrator application should show the other site available for

access. Ensure that at least one username is specified on each server that you can use as a test login.

Step 5 Then test email from a mail client with the username. The global address list in the address book should

list the other server and users on either side. Send the email message.

On the PIX Firewall, you should now be able to see syslog messages indicating an MSRPC connection.

If you are sending mail from the inside network to the outside network, you should see an MSRPC

connection going from the inside server to the outside server on port 135. Then you should see another

high-port connection being built between the outside server and the inside server. Your email should flow

through almost immediately.

1 2 ... 425 426 427 428 429 430 431 432 433 434 435 ... 465 466

Brak uwag

Cisco PIX 525 Dokumentacja Strona 430