Configure an external URL (client accesses server mail.contoso.com through extranet)
Estimated time to complete: 5-10 minutes
Before the client connects to the server over the Internet, you need to configure the external domain or URL on the virtual directory of the client Access server, and then configure the public Domain Name Service (DNS) records. The following steps configure the same external domain for each virtual directory's external URL . If you are configuring a different external domain for one or more virtual directory external URLs, you will need to manually configure the external URLs. For more information, see Virtual Directory Management.
What should I do?
Browse to the URL of your client Access server and open the EAC. For example, Https://Ex13CAS/ECP.
Browse to the URL of your client Access server and open the EAC. For example, Https://Ex13/ECP.
Enter your user name and password in domain \ user name and password, and then click Sign In.
Go to Servers > servers, select the name of the Internet-facing Client Access server , and click Edit 650) this.width=650; title= Edit icon alt= Edit icon src= HTTPS://I-TECHNET.SEC.S-MSFT.COM/ZH-CN/EXDEPLOY2013/JJ874096.6F53CCB2-1F13-4C02-BEA0-30690E6EA71D (v=exchg.150) . gif?state=3215-w-cabeigaaqaagaaeaaqaaaaeaaaaawamaaaa%7e "/>.
ClickOutlook everywhere .
In the Specify external host name field, specify the FQDN of the externally accessible client Access server. For example, mail.contoso.com.
When you are here, you also set the FQDN that is accessible internallyfrom the client Access server. In the Specify internal host name field, insert the FQDN that you used in the previous step. For example, mail.contoso.com.
Click Save.
Go to Servers > servers, and click 650) this.width=650; title= configuration icon alt= configuration icon src= https://i-technet.sec.s-msft.com/zh-CN/ exdeploy2013/jj874096.a9c33f23-3d44-44e7-a5d0-8446200c746e (v=exchg.150). gif?state=3215- w-cabeigaaqaagaaeaaqaaaaeaaaaawamaaaa%7e "/>" To configure the external access domain.
Under Select a client Access server to use with external URLs, click Add 650) this.width=650; title= add icon alt= add icon src= https:// i-technet.sec.s-msft.com/zh-cn/exdeploy2013/jj874096.c1e75329-d6d7-4073-a27d-498590bbb558 (v=exchg.150). gif? state=3215-w-cabeigaaqaagaaeaaqaaaaeaaaaawamaaaa%7e "/>.
Select the client access server that you want to configure, and then click Add. After you add all the client access servers that you want to configure, click OK.
-
In Enter the domain name that will be used with the external client Access server, type the external domain that you want to apply. For example, mail.contoso.com. Click Save.
650) this.width=650; "title=" note "alt=" note "src=" Https://i-technet.sec.s-msft.com/zh-CN/exdeploy2013/jj874096.note (v =exchg.150). gif?state=3215-w-cabeigaaqaagaaeaaqaaaaeaaaaawamaaaa%7e "/> Note:
Some organizations have a unique Outlook Web App FQDN that protects users from changes to the underlying server FQDN . Many organizations use owa.contoso.com rather than mail.contoso.com for the Outlook Web App FQDN. If you want to configure a unique Outlook Web App FQDN, do the following after you complete the previous step. This checklist assumes that you have configured a unique Outlook Web App FQDN.
SelectOWA (Default Web site), and then click Edit 650) this.width=650; title= Edit icon alt= Edit icon src= https://i-technet.sec.s-msft.com /ZH-CN/EXDEPLOY2013/JJ874096.6F53CCB2-1F13-4C02-BEA0-30690E6EA71D (v=exchg.150). gif?state=3215- w-cabeigaaqaagaaeaaqaaaaeaaaaawamaaaa%7e "/>.
In external URL, type https://, type the unique Outlook Web App FQDNthat you want to use, and then add /owa. For example, Https://owa.contoso.com/owa.
Click Save.
SelectECP (Default Web site), and then click Edit 650) this.width=650; title= Edit icon alt= Edit icon src= https://i-technet.sec.s-msft.com /ZH-CN/EXDEPLOY2013/JJ874096.6F53CCB2-1F13-4C02-BEA0-30690E6EA71D (v=exchg.150). gif?state=3215- w-cabeigaaqaagaaeaaqaaaaeaaaaawamaaaa%7e "/>.
In external URL, type https://, and then type the same Outlook Web App FQDN that you specified in the previous step, and then add /ECP. For example, HTTPS://OWA.CONTOSO.COM/ECP.
Click Save.
After you configure the external URLs for the Client Access server virtual directory, you need to configure public DNS records for Autodiscover, Outlook Web App, and mail flow. Public DNS Records should point to the external IP address or FQDN of the Internet-facing client Access server, and use the externally accessible FQDN that you configured on the Client Access server. The following are examples of DNS records that are recommended to be created to enable mail flow and external client connections.
Create the following DNS records on the ad
FQDN DNS |
Record type |
Value |
contoso.com |
Mx |
Mail.contoso.com |
Mail.contoso.com |
A |
192.168.136.170 |
Owa.contoso.com |
CNAME |
Mail.contoso.com |
Autodiscover.contoso.com |
CNAME |
Mail.contoso.com |
650) this.width=650; "title=" image "style=" border-top:0px; border-right:0px; Background-image:none; border-bottom:0px; padding-top:0px; padding-left:0px; border-left:0px; margin:0px; padding-right:0px "border=" 0 "alt=" image "src=" http://s3.51cto.com/wyfs02/M00/8C/81/ Wkiom1hulbvqerbiaadtcwngdbk026.png "" 619 "height="/>
Configure Outlook Anywhere
650) this.width=650; "title=" image "style=" border-top:0px; border-right:0px; Background-image:none; border-bottom:0px; padding-top:0px; padding-left:0px; border-left:0px; padding-right:0px "border=" 0 "alt=" image "src=" http://s3.51cto.com/wyfs02/M00/8C/7D/ Wkiol1hulbydfsdmaaekgdf2yb0318.png "" 644 "height=" 423 "/>
Configure the external access domain
650) this.width=650; "title=" image "style=" border-top:0px; border-right:0px; Background-image:none; border-bottom:0px; padding-top:0px; padding-left:0px; border-left:0px; margin:0px; padding-right:0px "border=" 0 "alt=" image "src=" http://s3.51cto.com/wyfs02/M01/8C/81/ Wkiom1hulbyy8-iiaadzrpqdg00068.png "" 625 "height=" 484 "/>
Login Https://mail.contoso.com/OWA, because the server self-signed certificate is used, the certificate error will be prompted at this time.
650) this.width=650; "title=" image "style=" border-top:0px; border-right:0px; Background-image:none; border-bottom:0px; padding-top:0px; padding-left:0px; border-left:0px; margin:0px; padding-right:0px "border=" 0 "alt=" image "src=" http://s3.51cto.com/wyfs02/M02/8C/81/ Wkiom1hulb3bjakraacrttlygro540.png "" 644 "height=" 265 "/>
How do I know this works?
To verify that you have successfully configured the external URL of the Client Access server virtual directory, do the following:
In the EAC, go to Servers > virtual directories.
In the Select Server field, select the Internet-facing client Access server.
Select the virtual directory, and then in the Virtual Directory details pane, verify that the external URL field is populated with the correct FQDN and service, as follows:
650) this.width=650; "title=" image "style=" border-top:0px; border-right:0px; Background-image:none; border-bottom:0px; padding-top:0px; padding-left:0px; border-left:0px; margin:0px; padding-right:0px "border=" 0 "alt=" image "src=" http://s3.51cto.com/wyfs02/M00/8C/81/wKiom1huLb6wkw6NAAE0Sh5S_ Bq423.png "" 602 "height=" 390 "/>
To verify that you have successfully configured public DNS records, do the following:
Open a command prompt and run nslookup.exe
.
Change to a DNS server that can query the public DNS zone.
Look in the nslookup
records for each FQDN that you created. Verify that the value returned for each FQDN is correct.
nslookup
type in set type=mx
, and then locate the accepted domain that you added in step 1. Verify that the value returned matches the FQDN of the client Access server.
650) this.width=650; "title=" image "style=" border-top:0px; border-right:0px; Background-image:none; border-bottom:0px; padding-top:0px; padding-left:0px; border-left:0px; margin:0px; padding-right:0px "border=" 0 "alt=" image "src=" http://s3.51cto.com/wyfs02/M01/8C/81/ Wkiom1hulb-rp4dnaaeq2xbfouk827.png "" 554 "height=" 472 "/>
Do you have any questions? Please ask for help in the Exchange forum. Please visit the following forums: Exchange Server, Exchange online, or Exchange online Protection.
https://technet.microsoft.com/zh-cn/exdeploy2013/PrintChecklist?state=3215-W-CABEIgAAQAAgAAEAAQAAAAEAAAAAwAMAAAA%7e
Exchange 2013 Configure external URLs