Skip to main content
ahsan
ahsan
New Member
January 24, 2018
Solved

High Availability of Exch 2016 - Fortinet 61E

  • January 24, 2018
  • 1 reply
  • 22994 views

Hi,

 

I have Fortinet 61E deployed and I want to allow my exchange server to be able to send and receive emails and OWA.

 

WAN interface is 200.200.200.1

Exch-1 is 192.168.0.10

Exch-2 is 192.168.0.11

 

Internally I have have DNS round Robin and clients access the servers via URL and randomly assess both servers.

 

For WAN, I have VIP 200.200.200.1 -> 192.168.0.10 (25 -> 25)

I cannot create same VIP for other server as it says same already exists.

 

How can I achieve the following:

VIP 200.200.200.1 -> 192.168.0.10 (25 -> 25)

VIP 200.200.200.1 -> 192.168.0.11 (25 -> 25)

 

I need to open port 25 and 443 on WAN interface and forward traffic to both internal email servers. Exchange server is DAG.

Attached is the scenario.

 

Any help will be much appreciated.

    Best answer by Markus

    Hi, You can achive this with loadbalancing. Maybe you have to enable it first -> System -> Feauture Visibility

    Then create two virtual server (smtp(s) and https) and then add the real servers. I'm not quite sure, but for the low ends Fortigates, you need firmware 5.6.x to create https virtual servers. Best regards, Markus

    1 reply

    Markus
    MarkusAnswer
    New Member
    January 25, 2018

    Hi, You can achive this with loadbalancing. Maybe you have to enable it first -> System -> Feauture Visibility

    Then create two virtual server (smtp(s) and https) and then add the real servers. I'm not quite sure, but for the low ends Fortigates, you need firmware 5.6.x to create https virtual servers. Best regards, Markus

    GusTech
    GusTech
    New Member
    January 25, 2018

    5.6.x and virtual servers works well with low end 5-9xE devices. Maybe lower also, have not tested.

    Markus
    Markus
    New Member
    January 25, 2018

    Yes, it works fine with low end Fortis, but if I remember correct, with 5.6.0, I was not able to create an http[style="background-color: #ffff00;"]s[/style] virtual server.

    Terms & ConditionsAccessibility statement