Domains and Addressing [ Installing and Configuring HP X.400 Administrator's Guide ] MPE/iX 5.0 Documentation
Installing and Configuring HP X.400 Administrator's Guide
Domains and Addressing
Within a domain, all users share a number of attributes. In an ADMD, an
O/R addressmay consist solely of Country, ADMD, and Personal name. In a
PRMD, there may be no ADMD name, but there is a PRMD name. In a PRMD,
other attributes are normally specified to reflect the organizational
structure and to allow routing to take place between the MTAs in the
PRMD. Any of the attributes can be used to specify the routethe message
should take from the MTA. Users whose UAs are associated with the same
MTA should have a unique combination of Organizational attributes within
the domain. For example, Figure 2-5 illustrates a scenario with four
MTAs in a PRMD.
Note that MTA 1 is not connected directly to MTA 4, so any messages it
sends to MTA 4 must be routed through an intermediate node. The message
can be routed through MTA 2 or MTA 3.
Figure 2-5. O/R Address and Routing
Between MTAs in a domain, a routing
algorithmis set up which determines the path that a message for a
particular recipient
takes through the MTS. For the example shown in Figure 2-5, the
algorithms for each of the MTAs are:
MTA 1
If Org. Name=A and Org. Unit=1 then UA is local
If Org. Name=A and Org. Unit=2 then UA is on MTA 3 (Route to MTA
3)
If Org. Name=A and Org. Unit=3 then UA is on MTA 3 (Route to MTA
3)
If Org. Name=B then UA is on MTA 2 or MTA 4 (Route to MTA 2)
MTA 2
If ORG. Name=B and Org. Unit=1 then UA is local
If Org. Name = B and Org. Unit=2 then UA is on MTA 4 (Route to
MTA 4)
If Org. Name=A and Org. Unit=1 then UA is on MTA 1 (Route to MTA
1)
If Org. Name=A and Org.Unit=2 then UA is on MTA 3 (Route to MTA
3)
If Org. Name=A and Org. Unit=3 then UA is on MTA 3 (Route to MTA
3)
MTA 3
If Org. Name=A and Org. Unit=2 the UA is local
If Org. Name=A and Org. Unit=3 then UA is local
If Org. Name=A and Org. Unit=1 then UA is on MTA 1 (Route to MTA
1)
If Org. Name=B and Org. Unit=1 then UA is on MTA 2 (Route to MTA
2)
If Org. Name=B and Org. Unit=2 then UA is on MTA 4 (Route to MTA
4)
MTA 4
If Org. Name=B and Org. Unit=2 then UA is local
If Org. Name=B and Org. Unit=1 then UA is on MTA 2 (Route to MTA
2)
If Org. Name = A the UA is on MTA 1 or MTA 3 (Route to MTA 3)
NOTE For MTA 4, it is better to route a message for Org. Name "A"
through MTA 3, which extracts its own recipients and forwards the
message to MTA 1. Routing the message through MTA 2 would be more
expensive.
The example shown in Figure 2-5 illustrates routingwithin a domain. The
routes that are added to connect to other domains depend on some
additional issues. In adding a route to an ADMD, the primary issue is
cost. The nature of the subscription to a public service varies between
ADMDs. Charging may be on the number of users connected, the number of
addresses connected, or many other variations. The precise conditions
obviously have an impact on the choice to be made. The other primary
consideration is that of performance. If a message is eventually to be
routed to the public service, it is best to minimize the number of
"hops"that must be made internal to the domain. In the example in Figure
2-5, it is best to have a single connection to
MTA 3, since that would mean at most one "hop" within the domain.
Remember that MTA 3 may become saturated if too many messages are being
routed through it, since it is also relaying all messages between MTA 1
and MTA 4. The optimum situation is to have as many interconnections as
possible within the domain to minimize hops. However, this obviously
makes for a more complex configuration.
Another consideration in deciding the configuration is that of security.
You, as Network Administrator, must explicitly allow any route out of the
domain. You can control exactly which domains can be accessed from the
local domain. These domains may be adjacent with at least one MTA in the
local domain connected to at least one in the adjacent domain, or domains
may be accessed through intermediate domains. For example, if you want a
connection to another PRMD called "Y," add to the algorithm for MTA3 the
following:
IF PRMD=Y then UA is in Private Domain Y (Route to MTA in domain "Y")
If users in the local domainwant to route to a domain "Z" which is not
adjacent to the local domain but can be reached through domain "Y"
(typically if "Y" is an Administration domain), another additional entry
can be made in the algorithm for MTA 3:
IF PRMD=Z then UA is in Private Domain Z (Route to MTA in domain Y)
This routes all messages for recipients in the domain "Z" through domain
"Y." This assumes that domain "Y" is able to route forward to domain "Z,"
but does not imply that "Z" is adjacent to "Y." It may be that the
message passes through several other "hops" before eventually arriving at
domain "Z." The only requirement is that at each stage the relaying
domain knows how to route to the destination domain "Z."
Also note that unless an additional entry is made for each MTA in the
local domain, either to MTA 3 or a direct connection to domain "Y," users
on these MTAs are not able to send messages to domain "Y" or "Z." In this
way, access to other domains can be controlled on a per MTA basis.
Choosing the Addressing Scheme in the Local Domain
When you decide the addressing scheme to be used within the domain, it is
important to consider future expansion. If a domain consists of a single
MTA, it is possible to specify only
PRMD and Personal name in the UA O/R names. However, if a second MTA is
added at some stage, there is no easy way of routing between the two MTAs
since both have the same PRMD and their attributes are the same for the
Personal names. It is better from the beginning to at least specify the
Organization Name and possibly one Organizational Unit. When additional
MTAs are added, you can add a route for the new MTA, based on the
Organization Name or Unit allocated.
Incorrectly Configured Domains
If a domain is incorrectly configured, there is the possibility that
loopingmay occur. For example, if MTA 3 was configured to route messages
for MTA 4 through MTA 1, then a message sent from MTA 1 for MTA 4 would
arrive once more at MTA 1. This results in a nondelivery notificationto
the sender of the message with a "Loop detected" error message.
Examination of the configuration of the MTAs in the route should reveal
the problem.
Loops detected in other domains require a more detailed examination of
the nondelivery reportthat is returned, which includes the domain that
issued the notification. With a sensible approach to routing, this
situation can easily be avoided.
MPE/iX 5.0 Documentation