Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Hub Transport - adding second server for manual failover, in case of network outages

Posted on 2009-03-30
9
Medium Priority
?
581 Views
Last Modified: 2012-05-06
I have a simple Exchange 2007 setup - two AD sites with two servers in each site. Servers are:
site1-hub-cas
site1-mailbox
site2-hub-cas
site2-mailbox

both hub/cas servers are internet facing, the VPN connection between site1 and site2 is built on the same network that site1-hub-cas uses for internet

Here's my question - last week I had a network outage on the internet link of site1-hub-cas, so no mail flowed from site1 to the internet (or vpn of course)

I do have another (slower) line to use for backup, can I place a cas/hub in VM, point it out this other link and turn it on only if the main link goes down? I've drawn a little diag attached
hub.jpg
0
Comment
Question by:kedarroy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
  • 2
9 Comments
 
LVL 32

Expert Comment

by:gupnit
ID: 24025020
Hi,
You got to have a Hub Transport Server in every site where you have Mailbox Server role.
So if in every site you have one HUb role along with Mailbox role, and if that Hub goes down, then mail flow from that site would be affect no matter what. For redundacny you just add another hub role in each site and everything will be taken care of. You cannot ask Hub from other site to do mail flow for mailbox server in other site
Hope this helps
Thanks
Nitin Gupta
0
 

Author Comment

by:kedarroy
ID: 24025114
Hello, Actually this is only for site1 at this time. The VPN connection between Site1 and Site2 is on the same link used for internet by the cas/hub in site1, so the network outage took out both the vpn link between sites and the site1 cas/hub internet.

The other link I have is much slower than my primary link and I would like to make use of it only if the main link goes down again. I don't need automatic failover, so manually turning on a VM image is fine by me, I just don't know for sure if having the VM setup then turned off will cause problems and if everything will work fine with it off, then work fine if the main link goes down again and I power the VM on to basically point internet mailflow out the other link (as well as CAS) - it's not for load balancing or anything, just manual failover
0
 
LVL 14

Expert Comment

by:Kaffiend
ID: 24026285
Rather than creating VMs, you could:

assign a separate IP address to a "disabled" NIC
create the necessary send connector that use only that IP address (again, this should be in a "disabled" state)

When the main link goes down, enable the NIC, and enable the connectors.  I am assuming here that you can re-configure routing on your router/firewall as well.
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 

Author Comment

by:kedarroy
ID: 24052377
Just talked to my boss - he wants to stick with VM - so it would basically be a backup HUB going out a different link. The server would be shutdown until needed - would this break Exchange?
0
 
LVL 14

Expert Comment

by:Kaffiend
ID: 24055384
I've not had any experience of creating an Exchange server and shutting it down until needed, so, sorry, I really don't know what would actually happen and how it would affect the Exchange organization.

My feeling is that it would not be a good thing, but that is unfortunately not a well-informed opinion.  It might very well not be problematic at all.  
 
The management tools will probably take a little longer to open as they search for the "missing" server.  And, you might find something about the missing server in the event logs. You will never again get a clean result when you run the Exchange BPA though  :-(

0
 
LVL 32

Expert Comment

by:gupnit
ID: 24055836
Hi,
2 HUb in same site and pulling down one, would not cause any issues in continuity of flow, but could cause issues if there are mails waiting to be relayed etc. Otherwise pretty much ok
Test it for yourself :-)
Thanks
Nitin Gupta (gupnit)
0
 

Author Comment

by:kedarroy
ID: 24102992
I believe I have convinced the execs that a 2nd disabled server in VM would not be the best way to go, as the server does have dual NIC. If I have the 2nd NIC disabled, as Kaffiend mentioned, is this correct?:

As mentioned earlier,  2nd NIC (disabled) has different IP and connected to VLAN that points out other Internet connection as well as send connector is created and disabled

Does this sound correct: if primary network goes down I would disable the primary NIC, enable the backup (do same with send connector), change internal DNS so servername points to new internal IP address and restart transport service?

thank you,
Kedar
0
 
LVL 14

Accepted Solution

by:
Kaffiend earned 2000 total points
ID: 24127814
Sorry for the late reply, been busy on a project.

I think that sounds about right.

One more thing you need to worry about is that in this case, you can now Send mail, when the main link goes down, but how do you Receive mail?  Your MX record is probably pointed to one of your main link's public IP addresses.  You might want to create a second MX record that points to a public IP address on your backup link, but assign this MX record a very low priority, so that mail servers delivering mail to your domain would always try the server with "primary" MX record first. (It doesn't really matter if the second MX record is blocked by your firewall until you decide to open it up in case the main link goes down, as any legitimate mail server will keep retrying, and because of the MX record priority assignment, they will always try the "primary" MX record first anyway)

0
 
LVL 14

Expert Comment

by:Kaffiend
ID: 24127818
Oh, and one more thing:

Might as well create a reverse DNS record for that other link now (have it in place before you need it)
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
The core idea of this article is to make you acquainted with the best way in which you can export Exchange mailbox to PST format.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question