I`ve done it twice, with install and reinstall Edge server 2013. 3d time, i`ve used clean server 2012 installation (not a template) and Exchange installation.
We have:
LAN Exchange 2013 organization, 2 servers (CAS + MBX x 2) SR1 and SR2, placed in DAG, SR1 takes 25 inbound port through CISCO ASA and its all just fine. I installed EDGE server in DMZ, 2nd NIC placed in "LAN-Servers". ACL between LAN-DMZ"ANY-ANY".
- Configure Internal SMTP server on Transport Configuration Set-TransportConfig -InternalSMTPServers 10.1.20.31, 10.1.20.32
- On the Edge, add DNS-suffix "domain.local", edit hosts file and add LAN Exchange servers
- ADD local DNS Host (A) EDGE1.domain.local with LAN IP
- LAN NIC leave w\o geteway, add local DNS servers
- DMZ NIC with gateway, DNS LAN servers either (none of external DNS records)
- From Edge made New-EdgeSubscription -FileName "C:\Edge.xml" -Force
- From mailbox New-EdgeSubscription -FileData ([byte[]]$(Get-Content -Path “C:\Edge.xml” -Encoding Byte -ReadCount 0)) -Site “msk-site”
- From mailbox Start-EdgeSynchronization -Server SR1 -TargetServer Edge1 -ForceFullSync, success.
- Turn off manual created External Send Connector, and checked outbound mail flow, success.
- From mailbox SR1 Set-SendConnector “EdgeSync – Inbound to Default-First*” -Port 2525 (i`ve tryed 25 either)
- Remaped inbound 25 port from CISCO ASA to the EDGE server DMZ Nic.
- Checked telnet 25 with External MX record, passed test user email availability with ms connectivity analyzer .
And... there is no inbound messages anymore. Get-Queue on the Edge, shows me inbound queue to internal Exchange servers with next error:
NextHopDomain
:
sr1.domain.local,sr2.domain.local
Status : Retry
MessageCount : 31
LastError : [{LRT=16.07.2014 0:31:47};{LED=441 4.4.1 Error encountered while communicating with
primary target IP address: "Failed to connect. Winsock error code: 10060, Win32 erro
r code: 10060." Attempted failover to alternate host, but that did not succeed. Eith
er there are no alternate hosts, or delivery failed to all alternate hosts. The last
endpoint attempted was 10.1.20.25:25};{FQDN=sr1.domain.local,sr2.domain.local};{IP=10.1.20.25}]
We have no IP 10.1.20.25 and we`ve never had. Local IP`s is SR1 -10.1.20.31, SR2 - 10.1.20.32. IP 10.1.20.25 cant be resolved, and has no ping, there is no server parameters with this IP (connectors configuration). From Edge server getting true answer by cmdlet:
Get-TransportConfig | fl InternalSMTPServers
InternalSMTPServers: 10.1.20.31, 10.1.20.32
Well, im done with it. No ideas at all.
Last things that i have:
- Add directly IP adresses in the "EdgeSync - Inbound" connector with replacing "--" type of smarthosts
- Turn ESMTP off on the CISCO ASA firewall.