Ask a question

Loren Kallevig

Exchange Server 2016 with 2 NICS. Is it a bad idea? If so, why?

We have an Essentials 2016 set up with Exchange and Essentials on the same IP address. Now I have an extra address which will allow reverse dns for both if I give each it's address. I am looking to see if I understand what needs to be done to make that happen. And someone suggested it is a bad idea.

 

Kal


asked04/29/2019 19:59
564 views
Add Comment
Mariette Knap

If you want to use two public IP addresses there is no need for two Nics in the Exchange server. The trick is to create two public hosts, like exchange.domain.com with pub IP address xxx.xxx.xxx.1 and essentials.domain.com with pub IP address xxx.xxx.xxx.2. You need a router that can handle this and forward traffic for 443 and 25 exchange.domain.com with xxx.xxx.xxx.2 to the internal IP address of your Exchange server. 

Do the same for essentials.domain.com with xxx.xxx.xxx.2 and forward 443 to the internal IP address of the DC.

 

Loren Kallevig

Thanks. 

I have not tried to enter 2 public addresses into the router, did not even think of that idea. Is this a common router attribute?

The Exchange server has 2 NICs, but only one is active. I do not see an obvious difference between putting the second address into the exchange server or into the router and having it forwarded to the exchange server.

I consulted Google and apparently a ​​​​​Ubiquiti Edgerouter X SFP - Router - Desktop - Black (ER-X-SFP) can be configured to do what you recommend and it is only $80, so I may well do that. Or do you have a different recommendation? 

I remain curious as to why it is better though?

Kal


replied 04/30/2019 22:55
Mariette Knap

That second public IP address does that run on the same internet connection as the other one? I am trying to understand why you want a second network adapter for that other public IP address.


replied 05/01/2019 05:05
Loren Kallevig

Yes, there is only one ISP (Comcast) with one subnet.

I don't "want a second network adapter", it seemed like the way to accomplish my goal. You have pointed out another, possibly better, way to do that. Now I am trying to understand what makes one method better than the other?

I am also looking for information on possible routers that can handle 2 public ip addresses. Has anyone here used the Ubiquity products? They appear capable of handling the 2 addresses OK, mapping them looks a bit more complicated. I didn't look closely enough to know if getting a windows VPN to work through this router is easy?

Is there a better brand for this purpose that is still easily affordable?

But the first question is, is it really necessary to go through this learning curve, why not just go directly to the Exchange Server?


replied 05/01/2019 16:03
Mariette Knap

Loren,

Can we have a Skype call sometime tomorrow?


replied 05/01/2019 16:06
Loren Kallevig

Sure, although the time difference may be an issue. I can probably be available by 11:00 Pacific Time, 11:30 is safer, then I am available till 2:00.

I can see a difference if the router is performing a firewall function, it will be interesting to hear your ideas.

 


replied 05/01/2019 20:36
Last Activity 05/02/2019 18:59

1 Answer(s)

  • Mariette Knap
    Add Comment
Add an Answer