M-Switch MIXER Evaluation Guide

Transcription

1 M-Switch MIXER Evaluation Guide Configuring M-Switch as a MIXER (SMTP/X.400) Gateway M-Switch MIXER Evaluation Guide Page 1 of 46

2 Objectives The purpose of this guide is to give the reader the tools to create an X.400 Messaging configuration that matches their requirements. For the purposes of this evaluation we have assumed that this is a 'clean' installation of R16.3 M-Switch, M-Box and M-Vault. There are five typical X.400 Messaging deployments that will be covered in this guide: Local Internet Mail Server to External X.400 Server(s) - MIXER Configuration Local Internet Mail Server to Local X.400 Server - MIXER Configuration External Internet Mail Server to External X.400 Server(s) - MIXER Configuration Local X.400 Server to External X.400 Server(s) - X.400 Configuration M-Switch MIXER Evaluation Guide Page 2 of 46

3 Local Internet Mail Server to External SMTP Server(s) - Internet Configuration You'll use 2 Isode management tools to achieve the objectives of this guide (these are installed as part of M-Switch and M-Vault) MConsole is a graphical user interface for managing M-Switch, M-Store X.400 and M-Box It can be used to create and manage a Messaging Configuration as well as to view live status information of the Messaging System. Secure Open Data, Identity and User Manager (Sodium) is used to manage user information in the M-Vault Directory server (such as entries for Users and Mappings for External X.400 Users to Internet Addresses). Prerequisites This guide covers everything you will need to do to setup your evaluation server, previous experience of using Isode's GUI Management Tools especially MConsole would be beneficial. Installation Requirements You should visit [ to discover which operating systems are supported for Isode evaluations. Evaluation downloads (excluding documentation) are held in a password-protected section of the Isode website. If you have not already done so you should apply for password access by filling in the form located at [ Obtain Isode Server Products Many Isode management tools are written in Java. You should install Java before installing the Isode packages, on Linux platforms you will need to add Java to the $PATH. You can obtain the required packages (Java SE 8 - JRE) from [ ava/j avase/downloads/index.html ]. Note for Windows Users If you're running Windows 7/8 or 10 you will need to run Isode Management tools (like MConsole and Isode Services Configuration) as an Administrator. You can do this by right-clicking on the program icons and choosing 'Run as administrator' from the pop-up. After obtaining password access to the Isode binary files you should download and install M-Vault and M-Switch, following the instructions on the download page for your platform. The number of packages required will vary depending on platform. M-Switch MIXER Evaluation Guide Page 3 of 46

4 Note for Linux Users On Linux platforms you should create an M-Switch runtime user account 'pp' and an M-Box runtime user account 'mbox'. After installation you should change the ownership of the /var/isode/ms directory to mbox and the group to bin. Evaluation License File Isode server products require a valid license from Isode before they will run correctly. Licenses are issued by Isode Customer Service. If you haven't already been sent a license when requesting access to the evaluation files, please send a message to request a license to [ pre-sales@isode.com] remembering to specify which Isode server products you need a license file for. Planning your Configuration Before you start you should plan your configuration and the most important part of this is deciding what Domains both Internet and X.400. The diagram below shows what domains we will be using in this guide. M-Switch MIXER Evaluation Guide Page 4 of 46

5 Creating Messaging Configurations using MConsole Your messaging configuration will be held in a Directory Server (DSA). In this section we are going to use MConsole to set up the DSA and your messaging configuration. Starting MConsole (Windows) From the Windows Programs menu, select Isode 1X.X > MConsole (Message Switch Console). Starting MConsole (Linux) Type in the following command: % /opt/isode/bin/mconsole Setting a Bind Profile Passphrase When asked if you wish to encrypt your bind profile, click [Yes]. Enter a passphrase, you must remember this passphrase as you will be prompted for it each time you run MConsole. Click [OK] and then click [OK] again on the confirmation screen. Creating the DSA After setting your bind profile passphrase a welcome screen will prompt you with a range of options. Select Create a new DSA and Messaging Configuration. Choose a User name that you wish to be the Directory Server Administrator, for the purposes of this evaluation this will also be the user that configures the Messaging Configuration. Click [OK]. M-Switch MIXER Evaluation Guide Page 5 of 46

6 At this point you could change the Directory Information Tree (DIT) structure but it is not necessary, so click [Next] to accept the defaults. Make sure to note down the password created in the 'Passwords configuration' screen that follows or fill in your own. Click on [Next] and MConsole will create and display Bind profile name and filesystem location for the Directory. Accept the defaults in the two fields and click [Next]. In the 'Confirm Details' screen that follows you'll see that have MIXER as the hostname and 19999, as the Port Numbers. At the end of the Wizard click on [Finish] to create and start the DSA and then connect to the DSA in the 'Bind Profile Management' screen. Creating the Messaging Configuration After creating the DSA in the last section, MConsole will prompt you to create a new messaging configuration. M-Switch MIXER Evaluation Guide Page 6 of 46

7 Click [Next] and select the option from the table below for the configuration you are creating. Messaging Configuration Option 1) Local Internet Mail Server to External X.400 Server(s). X.400 and SMTP (M-Switch MIXER) 2) Local Internet Mail Server to Local X.400 Server. X.400 and SMTP (M-Switch MIXER) 3) External Internet Mail Server to External X.400 Server(s). X.400 and SMTP (M-Switch MIXER) 4) Local X.400 Server to External X.400 Server(s). X.400 MTA (M-Switch X.400) 5) Local Internet Mail Server to External SMTP Server(s). SMTP (M-Switch SMTP) M-Switch MIXER Evaluation Guide Page 7 of 46

8 For the purposes of this Guide we are covering option 2 Local Internet Mail Server to Local X.400 Server, a nd we will then create External X.400 Connections. So, select MIXER as the configuration type and click [N ext]. In the Market Segment selection screen that follows, select the default "General Purpose" option and click [Next]. Click [Next]. For the Internet Domain unless you have created DNS and MX records for your chosen Local "MIXER" Domain check the Don't use DNS Radio Button. If you are creating an Internet only Mail server then you should enter your local Mail Domain here. In MIXER configurations you would typically use a "mixer" sub-domain of you mail domain e.g. mixer.headquarters.net. If you are not having and local Internet Mail Users then uncheck the Create an Internet Message Store for Local POP3 and IMAP Users checkbox, click [Next]. M-Switch MIXER Evaluation Guide Page 8 of 46

9 Click [Next]. Enter your X.400 Domain and if you are not having any local X.400 Message Store Users then uncheck the Create an X.400 Message Store for local P3 or P7 users checkbox, click [Next], enter None as the Anti-Virus configuration and click [Next] again. M-Switch MIXER Evaluation Guide Page 9 of 46

10 Click [Finish]. Always check the M-Switch Checkbox, if you have local Internet Users also check the M-Box Checkbox, if you have local X.400 Users check the M-Store X.400 Checkbox. Click [Next] and when the next Windows conforms that the services have been created, click [OK]. You have now successfully created the core Messaging Configuration. Creating Local Internet Domains and Mailboxes If you created a MIXER Configuration you will need to change the "Local Domain Site" of the Internet Message Store from mixer.headquarters.net to headquarters.net. You can do this in MConsole, as below. When done, click [Apply]. M-Switch MIXER Evaluation Guide Page 10 of 46

11 Now you will need to add some domains as local to M-Switch so navigate to the "domain" table and click [+ Add]. Enter your Local Internet Domain for the "Key" and "local" for the "Value", click [OK]. M-Switch MIXER Evaluation Guide Page 11 of 46

12 Repeat this process for any other domains that will be "local" to this Configuration, the screenshot that follows shows the ones we will be using. Creating Local Internet Users From the Menu select View > Configuration > Internet Mailbox Management. Click the Add M-Box User button and in the screen that follows, select the M-Box: Person radio button and click [Next]. M-Switch MIXER Evaluation Guide Page 12 of 46

13 Enter the details for the Internet User you wish to create and click [Finish]. If you are configuring an Internet Only config then skip this section, otherwise select the MIXER Tab. Click [Edit] next to the "X.400 Address". M-Switch MIXER Evaluation Guide Page 13 of 46

14 Enter the X.400 Address you would like this Internet Address Mapped to when being converted, click [OK]. Click [Apply] to commit this change. Repeat the above process for any other Internet Users you wish to create. Creating X.400 Users From the Main Menu in MConsole Select View > Configuration > X.400 Mailbox Management. Then expand the routing tree to where you want to create the mailboxes. M-Switch MIXER Evaluation Guide Page 14 of 46

15 Click on "Add P7 Mailbox". Select the Addressing Format that you want, click [Next]. Complete the form, click [Next] and then click [Next] again to confirm the O/R address. You'll then be prompted to create a new White Pages entry. M-Switch MIXER Evaluation Guide Page 15 of 46

16 Select the Create a new White Pages entry radio button, click [Next] and then click [Next] again to bring up the Passwords screen. Enter P3 and P7 Passwords (they can be the same) and click [Finish]. Back in the main MConsole screen select the "White Pages" tab for this user. Select the " and Jid" sub-tab and enter the Address you wish to map this X.400 Address to. M-Switch MIXER Evaluation Guide Page 16 of 46

17 Click [Apply] to commit these changes. Repeat this process for any other X.400 Users you wish to create. You have now created a Messaging System where you can exchange messages between Internet Users and X.400 Users. You can now either proceed to creating External X.400 P1 connections, Creating External SMTP Connections or Testing the configuration. M-Switch MIXER Evaluation Guide Page 17 of 46

18 Configuring External X.400 P1 Connections In order to connect to an external X.400 Server over X.400 P1 you need to exchange connection information with the owner of that X.400 Server. Both parties need to know the following information about the remote X.400 server. Information Example IP Address e.g Port Number e.g. 102 Transport Selector 591 Presentation Selector Session Selector Address Space MTA Name MTA Password e.g. /PRMD=X400/ADMD=External/C=GB/ e.g. ExternalMTAName e.g. secret Configuring the Local P1 Connection Details From the MConsole Switch Configuration screen expand the Switch and Channels, navigate to the "x400p1" Channel and select the Inbound Tab. Here the MTA Name has been set as the Hostname by default and can be changed if required. Click the "Edit" button next to the presentation address. This shows the hostname of the Local Machine, if you have a M-Switch MIXER Evaluation Guide Page 18 of 46

19 NAT at your firewall that connects to this server on Port 102 then you will need to provide the Remote Part with the IP Address of the Firewall not this IP Address. Click the "Selectors" button to see and change these values. Click [OK] on both screens to return to the main MConsole display. Now select the "Auth" Tab and click the "Edit" Button next to the "Initiator RTS Credentials". M-Switch MIXER Evaluation Guide Page 19 of 46

20 You can set the MTA Name and Password here. Click [OK]. Repeat this process for the "Responder RTS Credentials". Configuring the Remote P1 Connection Details First you need to create the X.400 Address Space of the remote Server in the Routing Tree. Right Click on the "Routing Trees" in the Messaging Configuration screen of MConsole and select "Add nodes". Ensure only "Create Routing Tree entries representing and X.400 O/R Hierarchy" is checked, click [Next]. Fill in the details for the Remote MTA and click [Next]. Now create the External MTA, right click on the "Message Transfer Agents" in the Messaging Configuration Screen of MConsole and select "New MTA". M-Switch MIXER Evaluation Guide Page 20 of 46

21 Select "External X.400 MTA". Click [Next]. Enter the details for the External X.400 MTA that you have been provided with. Click [Next]. Expand the Routing Tree until you find their X.400 Address Space. Click [Next]. M-Switch MIXER Evaluation Guide Page 21 of 46

22 Enter their "MTA Name" and Password that you have been provided with. Click [Finish]. If you need to change the "Port" or "Selectors" of this MTA you can do this by selecting the "x400p1" Channel of this MTA and follow the same process as you did for the Local MTA M-Switch MIXER Evaluation Guide Page 22 of 46

23 Adding Mappings for External X.400 Users If there are no mappings for an X.400 sender or recipient then the X.400 Address will be converted by adding the X.400 Address as the "name" part of the internet address and the MIXER domain as the "domain" part of the internet Address, for example without any mapping: /G=Firstname/S=Lastname/P=MyPRMD/A=MyADMD/C=GB/ would get mapped to: This does not look particularly nice and is open to typographical errors when sending messages. So unless you have too many senders to make creating mappings for each one then you should create mappings using the process below. You will need to start the Isode LDAP GUI Sodium: In Windows select Start > All Programs > Isode R16.3 > Sodium (Secure Open Data, Identity and User Manager), in Linux run /opt/isode/bin/sodium. When Sodium starts it will ask you for a passphrase, use the same one as you use for MConsole. You will see a bind displayed for your Directory Server, click Connect. Expand the Directory Tree and navigate to "cn=messaging Configuration". Right Click and select "Add below...". In the template screen, select the "Container" template, click [Next]. M-Switch MIXER Evaluation Guide Page 23 of 46

24 Enter a Name (we've used "External X.400 Mappings" and click [Next]. Click [Add]. Select the newly created "Container" and right click Add below... Select "Person" and click [Next]. M-Switch MIXER Evaluation Guide Page 24 of 46

25 Check Organizational Person, Internet Organizational Person and X.400 Messaging, click [Next]. Enter a name for the External X.400 User and click [Finish]. M-Switch MIXER Evaluation Guide Page 25 of 46

26 On the Personal tab Enter Values for "Surname" and " " where is the address you want the External X.400 Address mapped to, then select the "Messaging" tab. Click the "Edit" Button next to O/R Addresses: Enter the External X.400 Address you want to Map, you may need to use the "Name Form" drop down at the top to display an X.400 Address format that matches what you require. Click [OK]. M-Switch MIXER Evaluation Guide Page 26 of 46

27 Click [Add]. Repeat this process for any other External X.400 Users you wish to Map. You can also use this process to Map External SMTP Users to External X.400 Users in a MIXER Gateway deployment with no local users. M-Switch MIXER Evaluation Guide Page 27 of 46

28 Configuring External SMTP Servers If you wish to connect an External SMTP Server that has no DNS or MX records, for example and EDI Application, then follow the procedure below. Right click on the "Message Transfer Agents" in the Messaging Configuration Screen of MConsole and select "New MTA". Select "External MTA", "Internet". Click [Next]. The "Directory Name" can be anything you want that will it make it easy to identify the server. Enter an IP Address or Hostname. Click [Finish]. M-Switch MIXER Evaluation Guide Page 28 of 46

29 Now you need to create the "Routing Tree" information for the domain that you want this server to support. Right Click on the "Main Routing Tree" and select "Add nodes". Check the "Create Routing Tree entries representing and Internet domain. Click [Next]. Enter the required Internet Domain and click [Finish]. Now expand the Routing Tree to your Internet Domain. M-Switch MIXER Evaluation Guide Page 29 of 46

30 Click the "Add" button next to the MTA Information Frame. Select your newly created External SMTP MTA from the drop down list. Click [OK]. Click [Apply]. Repeat this process for any other External SMTP servers you may need. M-Switch MIXER Evaluation Guide Page 30 of 46

31 Configure the Address Conversion Rule In this configuration we are using "Per User" Address Conversion where each mapping between an X.400 Address and an Internet Address is stored in the directory. An alternative approach, that is not covered in this guide is to use "Algorithmic" Address Conversion where and X.400 Address Space e.g. /PRMD=MyPRMD/ADMD=MyADMD/C=MyC/ is mapped to an Internet domain e.g. mydomain.com such that: /G=MyFirstname/S=MyLastname/PRMD=MyPRMD/ADMD=MyADMD/C=MyC/ maps to MyFirst or /CN=MyCommonName/PRMD=MyPRMD/ADMD=MyADMD/C=MyC/ maps to MyCommonNam or /S=MyLastname/PRMD=MyPRMD/ADMD=MyADMD/C=MyC/ maps to n.com If you want to use this Address Conversion method it is fairly intuitive or you can consult the M-Switch X.400 Administration Guide. To configure "Per User" Mapping for all addresses Right Click on the Main Address Conversion Table and select "Add address mapping". Select "Per User" and [Next]. M-Switch MIXER Evaluation Guide Page 31 of 46

32 Select "Any Internet Domain" and "Any X.400 Domain" and Click [Finish]. M-Switch MIXER Evaluation Guide Page 32 of 46

33 Starting the Services The M-Vault (DSA) Services was started while running the configuration wizard. All other services should now be started so that you can test the system. Starting the Services (Windows) You need to start the Isode Services Configuration GUI. Start > All Programs > Isode R16.3 > Isode Services Configuration (Right Click "Run as Administrator). All Services that you need should be set to "Startup" Automatic. The table that follows shows what services should be installed and started for each type of configuration. Services Local Internet MailServer & Local X.400 Mailboxes Local Internet MailServer & External X.400 Server(s) Local X.400 Mailboxes & External SMTP Servers Local Internet MailServer, no X.400 Functionality Local X.400 Mailboxes, no SMTP Functionality MIXER Gateway, no Local Internet or X.400 Mailboxes DSA Yes Yes Yes Yes Yes Yes M-Switch OSI Listener M-Box IMAP Server M-Box LMTP Server M-Box Management Server Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Event Server Yes Yes Yes M-Box POP3 Server M-Switch Queue Manager Yes Yes Yes Yes Yes Yes Yes Yes Yes M-Switch MIXER Evaluation Guide Page 33 of 46

34 M-Switch SMTP Server M-Store X.400 Server Yes Yes Yes Yes Yes Yes Yes To change the "Startup type" of a Service select it and Right Click > Edit. Select the Startup Type from the drop down list. Click [OK]. Repeat this for All services you need to change. Click the [Start All] button. M-Switch MIXER Evaluation Guide Page 34 of 46

35 Starting the Services (Linux) To start the services on Linux do the following: # cd /etc/init.d To Start the configured M-Switch Services: #./pp start To Start the M-Box Service (If Required): #./mbox start To Start the M-Store X.400 Service (If Required): #./pumice start M-Switch MIXER Evaluation Guide Page 35 of 46

36 Testing the System The easiest way to test the system is to send a message from an Internet User to an X.400 User, however before you do that it is always a good idea to check the routing using MConsole. Checking the Routing with MConsole Firstly you need to connect to the MTA from the main menu select View > Live Operations > Switch Operations. Click [OK] to dismiss the Error message. You will now need to modify the Switch Connection details, right click on the MTA and select "Modify". Then enter the password you entered when originally creating the DSA, and set the Authentication Mechanism to DIGEST-MD5 M-Switch MIXER Evaluation Guide Page 36 of 46

37 Click [OK]. Then right click on the MTA and select "Connect". You should now be successfully connect to the MTA. From the Switch Configuration Menu select Messaging > Check Address Routing... Then Enter an Internet User Address to Test and Click "Check Address". M-Switch MIXER Evaluation Guide Page 37 of 46

38 This tells you that the Message will be delivered to the LMTP Channel and so into M-Box for reading by an Internet Mail Client. It also shows the equivalent X.400 Address that you entered. Repeat the process for an X.400 User. This tells you that the Message will be delivered to the P3 Channel and so into M-Store X.400 for reading by an X.400 User Agent. It also shows the equivalent Internet Address that you entered. Repeat the process for an External X.400 User. M-Switch MIXER Evaluation Guide Page 38 of 46

39 This tells you that the Message will be delivered to the P1 Channel and the External X.400 MTA it will be sent to. It also shows the equivalent Internet Address that you entered. Repeat the process for an External SMTP User. This tells you that the Message will be delivered to the smtp-external Channel and the IP Address of the External SMTP server it will be sent to. It also shows the equivalent X.400 Address that you entered. You are now ready to test with your Favourite Internet Mail Client (We will use the one provided with Windows 10) and the Isode Demonstration X.400 User Agent (XUXA). Sending Messages between Internet and X.400 Mail Clients For the Internet Mail Client the settings you will need to know are: Incoming Server The IP address that the system is running on M-Switch MIXER Evaluation Guide Page 39 of 46

40 Protocol IMAP Port 143 TLS Username Password No As configured As configured. Passwords will be encrypted (Thunderbird setting) Outgoing Server The IP address that the system is running on Port 587 TLS Authentication Username Password No Required Full address As configured. Passwords will be encrypted (Thunderbird setting) You should run the Isode Demonstration User Agent Locally on the MTA server as it will "Auto Configure". To Start XUXA on Windows select Programs >Isode R1X.X > XUXA (X.400 Demo User Agent), right-click and select Run as Administrator. To Start XUXA on Linux use the command % /opt/isode/bin/xuxa Expand the Directory Tree until you Find the User you Created in the "White Pages" branch of the Tree, Click [OK]. M-Switch MIXER Evaluation Guide Page 40 of 46

41 Enter the Password you chose when creating the User. Click [OK]. XUXA will now display the empty Inbox. Start your configured Internet Mail Client and select "Compose". Create a simple test to the Address that you entered when creating the X.400 User. Click [Send] and Go to XUXA. M-Switch MIXER Evaluation Guide Page 41 of 46

42 You can now see the Message as received by the X.400 User. Click [Reply]. Click [Send]. M-Switch MIXER Evaluation Guide Page 42 of 46

43 Click [OK]. Return to the Internet Mail Client. You can see the reply to the message and the Delivery Report in XUXA. M-Switch MIXER Evaluation Guide Page 43 of 46

44 Congratulations your MIXER System is now working and you are ready to test with External X.400/Internet Users. M-Switch MIXER Evaluation Guide Page 44 of 46

45 What next/other resources Help us improve our Evaluation Guides Producing evaluation guides that are easy to follow and that help evaluators get started with our products is important to us. Please help us improve this guide by ing us at Product Information While following this guide you have used M-Switch, M-Store X.400 and M-Vault (LDAP/X.500 Directory Server) and associated management tools. For more information on these server products, follow the links below: M-Switch: [ M-Store X.400: [ M-Vault: [ You have also used Isode's MConsole (messaging configuration and operational management for internet & X.400 messaging). For more on MConsole see [ Exploring Product Capabilities This guide has covered only the basic setup of an MIXER system. To extend your system and explore the capabilities of Isode's management tools further you can read the Administration Guides available from the Isode website in PDF format. Administration Guides, together with all other Isode documentation is available from [ ort/docs.html]. Whitepapers Isode regularly publishes whitepapers relevant to Internet and X.400 messaging. All whitepapers can be searched from the whitepaper index page on the Isode website at [ You can browse whitepapers relevant to your particular area of interest by following the links on the sub-menu on the left hand side of that page. M-Switch MIXER Evaluation Guide Page 45 of 46

46 Copyright The Isode Logo and Isode are trade and service marks of Isode Limited. All products and services mentioned in this document are identified by the trademarks or service marks of their respective companies or organizations, and Isode Limited disclaims any responsibility for specifying which marks are owned by which companies or organizations. Isode software is copyright Isode Limited , All rights reserved. Isode software is a compilation of software of which Isode Limited is either the copyright holder or licensee. Acquisition and use of this software and related materials for any purpose requires a written licence agreement from Isode Limited, or a written licence from an organization licensed by Isode Limited to grant such a licence. This manual is copyright Isode Limited M-Switch MIXER Evaluation Guide Page 46 of 46