
C-3
Cisco PIX Firewall and VPN Configuration Guide
78-15033-01
Appendix C MS-Exchange Firewall Configuration
Configuring the Outside Server
Configuring the Outside Server
Follow these steps to configure the outside Microsoft Exchange server:
Step 1 On the outside Microsoft Exchange server, click the Network entry in the Start>Settings>Control
Panel. In the Ethernet adapter Properties section, set the primary WINS (Windows Internet Name
System) address to the IP address of the outside system, in this case, 209.165.201.2. Set the secondary
WINS address to the global address from the static command statement, 209.165.201.5.
Step 2 Also in the Network entry, click Services>Computer Browser. Ensure that the outside server is the
master browser for the server’s outside domain, which in this case, is pixout.
Step 3 Click Start>Programs>WINS Manager. Click Mappings>Static Mappings. Add a static mapping for
the inside server’s domain, pixin, with the global address from the static command statement,
209.165.201.5. Also add a unique mapping for the inside server’s name, inserver, and set it as well to
the global address from the static command statement. Then save the new information and exit the WINS
Manager.
Step 4 Next, establish a trusted, trusting relationship between the outside server’s domain, pixout and the inside
server’s domain, pixin.
a. Click Start>Programs>Administrative Tools>User Manager for Domains.
b. Click Policies>Trust Relationship and then click Trusting Domain.
c. Add a trusting domain for the inside server’s domain and assign a password to it.
d. Establish a trusted domain for pixin by clicking Trusted Domain.
Step 5 Exit the application and reboot the Windows NT system.
Configuring the Inside Server
Follow these steps to configure the inside Microsoft Exchange server:
Step 1 On the inside server, click Settings>Control Panel>Network, set the primary WINS address to the
address of that system, 192.168.42.2, and set the secondary WINS address to the inside address of the
PIX
Firewall, 192.168.41.1.
In the Network entry, click Services>Computer Browser. Ensure that the inside server is the master
browser for the domain, which in this case, is pixin.
In the Network entry, click Protocols>TCP/IP Protocol>WINS Configuration. Set the primary and
secondary WINS address to that of the inside server, in this case, 192.168.42.2. On the Default Gateway
tab, set the address to the inside address of the PIX
Firewall, in this case, 192.168.42.1.
Step 2 Click Start>Programs>WINS Manager, and specify a static mapping for the outside server’s domain,
pixout, and a unique mapping for the outside server, outserver. Set both to the address of the outside
server, 209.165.201.2.
On the Server menu, click Replication Partners and add a Pull Partner for the outside server, in this
case, 209.165.201.2. This permits pulling the outside server’s database to the inside server’s local
database. This incorporates the two server’s databases so that user information is shared across the
firewall. Use the default options in the remainder of this dialog box.
You can view the information you entered by clicking Mappings>Show Database.
Commentaires sur ces manuels