1. Appendix B Advanced Topics in Exchange Server 2010

2. Module Overview Deploying Highly Available Solutions for Multiple Sites Implementing Federated Sharing

3. Lesson 1: Deploying Highly Available Solutions for Multiple Sites Discussion: High Availability for Multiple Sites Using Cross-Site DAGs Challenges of Implementing Cross-Site, Nonmailbox Servers Failover Process for Data Centers Best Practices for Multisite Failover

4. Discussion: High Availability for Multiple Sites What are some of the common multisite high-availability scenarios? Does your company have a warm disaster-recovery site or is it planning to have one? After mail services successfully fail over to the second site, what other issues might you still need to address?

5. Using Cross-Site DAGs Cross-site DAGs do not require: Special network hardware A single shared subnet A single Active Directory site Cross-site DAGs do require: Less than 250 ms latency between all DAG nodes Reestablishment of cluster quorum after site failure Administrative intervention to complete datacenter failover Support for nonmailbox roles in each site At least one domain controller in each site

6. Challenges of Implementing Cross-Site, Nonmailbox Servers Challenges of implementing cross-site, nonmailbox servers are: External DNS records name must point to secondary site Clients must reconnect to the new RPC client access array Inbound e-mail must be redirected

7. Failover Process for Data Centers Site A Site B DAG Hub Transport (FSW) Hub Transport (FSW) Hub Transport Client Access (Alt FSW)

8. Best Practices for Multisite Failover Verify failover functionality with periodic testing Reduce failover time by using low TTL on DNS records for the Client Access server array, Client Access server URLs, and SMTP records Closely monitor replication health and other system components to ensure failover health Follow proper change-management procedures Prevent cluster network cross-talk

9. Lesson 2: Implementing Federated Sharing What Is Federated Sharing? Components of Federated Sharing How Federated Sharing Works for Availability Information Access How Federated Message Delivery Works Configuring a Federation Trust Configuring Organizational Relationships and Sharing Policies

10. What Is Federated Sharing? Federated sharing: Requires Microsoft Federation Gateway as a trust broker Uses standard federation technologies to establish trusted relationships Enables secure Internet communications between organizations Is supported for all messaging clients Requires each organization to establish and manage its trust

11. Components of Federated Sharing Federated Sharing requires: Organization identifier that identifies which domains are available for federation Federation Trust with Microsoft Federation Gateway Establishment of a federated sharing relationship with another federated organization to enable sharing of availability information, or Federated Delivery of e-mail Sharing relationships that define the organizations with which your users will share data, and the type of data they can share

12. Adatum.com Contoso.com How Federated Sharing Works for Availability Information Access Client Access Server Client Access Server Microsoft Federation Gateway Microsoft Federation Gateway Client Access Server Client Access Server Domain Controller Domain Controller Domain Controller Domain Controller 2 2 3 3 4 4 7 7 8 8 Mailbox Server Mailbox Server 6 6 1 1 5 5

13. Adatum.com Contoso.com How Federated Message Delivery Works Microsoft Federation Gateway Microsoft Federation Gateway Domain Controller Domain Controller Domain Controller Domain Controller 2 2 3 3 4 4 Mailbox Server Mailbox Server Hub Transport Server Hub Transport Server 6 6 5 5 Hub Transport Server Hub Transport Server Mailbox Server Mailbox Server 1 1

14. Configuring a Federation Trust Before configuring a federation trust: When configuring the federation trust: Obtain a trusted certificate Configure the authoritative domains Configure external DNS records Ensure the server has Internet access Ensure that the server has the certificate installed Provide the certificate thumbprint

15. Configuring Organizational Relationships and Sharing Policies Organizational relationships determine the organizations you want to share information with, and what types of information you will share Sharing policies define which users can share information with other organizations, and what types of information those users can share