设置传入传真Setting up incoming faxing

Microsoft 统一消息 (UM) 依赖于通过认证的传真合作伙伴解决方案,实现诸如发送传真或传真路由等增强的传真功能。默认情况下,Exchange 服务器不会配置为允许将传入传真传递给启用 UM 的用户。相反地,Exchange 服务器会将传入传真呼叫重定向至认证的传真合作伙伴解决方案中。传真伙伴的服务器收到传真数据后,以 .tif 附件的形式将传真包含在一封电子邮件中,并将其发送到收件人邮箱。Microsoft Exchange Unified Messaging (UM) relies on certified fax partner solutions for enhanced fax features such as outbound fax or fax routing. By default, Exchange servers aren't configured to allow incoming faxes to be delivered to a user that's enabled for UM. Instead, an Exchange server redirects incoming fax calls to a certified fax partner solution. The fax partner's server receives the fax data and then sends it to the user's mailbox in an email message with the fax included as a .tif attachment.

有关传真合作伙伴的详细信息,请参阅Microsoft 可以准确找到传真合作伙伴的For more information about fax partners, see Microsoft Pinpoint for Fax Partners.

部署和配置传真Deploying and configuring faxing

UM 将传入传真呼叫转发到专用传真合作伙伴解决方案,此解决方案然后与传真发件人建立传真呼叫,并代表启用了 UM 的用户接收传真。然而,要允许启用 UM 的用户在他们的邮箱中接收传真邮件,首先必须使传真能够传入并对关联到启用 UM 的用户的 UM 邮箱策略设置传真合作伙伴的 URI。您可以允许或禁止 UM 拨号计划、UM 邮箱策略和启用 UM 的用户的邮箱上的传入传真。有关详细信息,请参阅下列主题:UM forwards incoming fax calls to a dedicated fax partner solution, which then establishes the fax call with the fax sender and receives the fax on behalf of the UM-enabled user. However, to allow UM-enabled users to receive fax messages in their mailboxes, you must first enable incoming faxing and set the fax partner's URI on the UM mailbox policy that's linked to the UM-enabled user or users. You can allow or prevent incoming faxing on UM dial plans, UM mailbox policies, and on the mailbox for a UM-enabled user. For details, see the following topics:

步骤 1:部署统一消息Step 1: Deploy Unified Messaging

您可以设置为内部部署或混合传真之前需要成功部署客户端访问和邮箱服务器和配置支持的语音 over IP (电话 VoIP) 网关,以允许传真组织。有关如何部署 UM 的详细信息,请参阅Deploy Exchange 2013 UM。有关如何部署 VoIP 网关和 IP 专用交换机 (Pbx) 的详细信息,请参阅Connect UM to Your 电话系统Before you can set up faxing for your on-premises or hybrid organization, you need to successfully deploy Client Access and Mailbox servers and configure your supported Voice over IP (VoIP) gateways to allow faxing. For details about how to deploy UM, see Deploy Exchange 2013 UM. For details about how to deploy VoIP gateways and IP Private Branch eXchanges (PBXs), see Connect UM to Your Telephone System.

重要

在统一消息和 Microsoft Office Communications Server 2007 R2 或 Microsoft Lync Server 相集成的环境中,不支持使用 T.38 或 G.711 发送和接收传真。Sending and receiving faxes using T.38 or G.711 isn't supported in an environment where Unified Messaging and Microsoft Office Communications Server 2007 R2 or Microsoft Lync Server are integrated.

步骤 2:配置传真合作伙伴服务器Step 2: Configure fax partner servers

接下来,您需要使传真能够传入并在您的组织所要求的每个 UM 邮箱策略上配置传真合作伙伴的 URI。要成功地部署传入传真,您必须将认证的传真合作伙伴解决方案与 Exchange 统一信息相结合。有关详细信息,请参阅对于 Exchange UM 传真顾问。有关认证传真合作伙伴的列表,请参阅传真合作伙伴的 Microsoft PinpointNext, you need to enable incoming faxing and configure the fax partner's URI on each UM mailbox policy that you require in your organization. To successfully deploy incoming faxing, you must integrate a certified fax partner solution with Exchange Unified Messaging. For details, see Fax advisor for Exchange UM. For a list of certified fax partners, see Microsoft Pinpoint for Fax Partners

备注

由于传真合作伙伴服务器在组织之外,防火墙端口必须配置为允许 T.38 协议端口以便能够通过基于 IP 的网络传真。默认情况下,T.38 协议使用 TCP 端口 6004。它也可以使用用户数据报协议 (UDP) 端口 6044,但是这将由硬件制造商定义。防火墙端口必须配置为允许传真数据,该传真数据使用 TCP 或 UDP 端口或制造商定义的端口范围。Because the fax partner server is external to your organization, firewall ports must be configured to allow the T.38 protocol ports that enable faxing over an IP-based network. By default, the T.38 protocol uses TCP port 6004. It can also use User Datagram Protocol (UDP) port 6044, but this will be defined by the hardware manufacturer. The firewall ports must be configured to allow fax data that uses the TCP or UDP ports or port ranges defined by the manufacturer.

步骤 3:在统一消息上启用传真Step 3: Enable faxing on Unified Messaging

若要使用户可以使用统一消息接收传真,必须正确地配置三个组件。Three components must be configured correctly for users to be able to receive faxes by using Unified Messaging:

  • UM 拨号计划UM dial plans

  • UM 邮箱策略UM mailbox policies

  • UM 邮箱UM mailboxes

可以对 UM 拨号计划、UM 邮箱策略或各个启用 UM 的用户的邮箱启用或禁用传真。可以使用 Exchange 管理中心 (EAC) 或 Exchange 命令行管理程序对传真启用或禁用 UM 邮箱策略。拨号计划以及各个启用 UM 的用户的启用和禁用需要使用 Exchange 命令行管理程序来完成。下表显示了可用的选项以及用于启用和禁用传真的 cmdlet 和参数。Faxing can be enabled or disabled on UM dial plans, UM mailbox policies, or on an individual UM-enabled user's mailbox. UM mailbox policies can be enabled or disabled for faxing using either the Exchange Administration Center (EAC) or the Exchange Management Shell. Enabling and disabling of dial plans and individual UM-enabled users needs to be done using the Exchange Management Shell. The following table shows the options that are available and the cmdlets and parameters that are used for enabling and disabling faxing.

UM 组件UM component 使用 EAC 启用/禁用?Enable/disable using the EAC? 启用传真的命令行管理程序示例Shell example for enabling faxing
拨号计划Dial plan
No
Set-UMDialPlan -id MyUMDialPlan -faxenabled $true
UM 邮箱策略UM mailbox policy
Yes
Set-UMMaiboxPolicy -id MyPolicy -AllowFax $true
启用 UM 的用户UM-enabled user
No
Set-UMMailbox -id tonysmith -faxenabled $true

默认情况下,虽然用户的邮箱允许传入传真,但您必须首先对启用 UM 的用户所分配的 UM 邮箱策略启用入站传真,然后输入传真合作伙伴的 URI。By default, although the UM dial plan and the user's mailbox allow incoming faxes, you must first enable inbound faxing on the UM mailbox policy that's assigned to the UM-enabled user and then enter the fax partner server's URI.

若要使已启用 UM 的用户可以接收传真,必须执行下列操作:To enable UM-enabled users to receive faxes, you must do the following:

  • 验证每个 UM 拨号计划是否允许与该拨号计划关联的用户接收传真。默认情况下,所有与拨号计划关联的用户都能接收传真。要使启用 UM 的用户在他们的邮箱接收传真邮件,每个 VoIP 网关或 IP PBX 必须配置为接受传入传真呼叫。还必须使与拨号计划关联的用户能够接收传真邮件。有关如何使与拨号计划相关联的用户接收传真或阻止其接收传真的详细信息,请参阅允许用户接收传真.Verify that each UM dial plan allows the users who are associated with the dial plan to receive faxes. By default, all users who are associated with a dial plan can receive faxes. For UM-enabled users to receive fax messages in their mailbox, each VoIP gateway or IP PBX must be configured to accept incoming fax calls. You must also enable fax messages to be received by users who are linked with the dial plan. For more information about how to enable users linked with a dial plan to receive faxes or to prevent them from doing this, see Enable a user to receive faxes.

    备注

    如果禁止在拨号计划上接收传真邮件,则与拨号计划关联的所有用户都不能接收传真邮件,即使您将单个用户的属性配置为允许接收传真邮件也是如此。在 UM 拨号计划上启用或禁用传真功能优先于单个启用 UM 的用户的设置。If you prevent fax messages from being received on a dial plan, no users who are associated with the dial plan will be able to receive faxes, even if you configure an individual user's properties to allow them to receive faxes. Enabling or disabling faxing on a UM dial plan takes precedence over the settings for an individual UM-enabled user.

  • 配置与启用 UM 的用户关联的 UM 邮箱策略。UM 邮箱策略必须配置为允许传入传真,包括传真合作伙伴的 URI 以及传真合作伙伴服务器的名称。 FaxServerURI 参数必须使用以下形式:sip:< 传真服务器 URI>:< 端口>;< 传输>,其中"传真服务器 URI"是传真合作伙伴服务器的完全限定域名 (FQDN) 或 IP 地址。"端口"是传真服务器侦听传入传真呼叫的端口,而"传输"是用于传入传真的传输协议(UDP、TCP 或传输层安全性 (TLS))。例如,您可以按如下方式配置一个 UM 邮箱策略来接收传真。Configure the UM mailbox policy that's associated with the UM-enabled user. The UM mailbox policy must be configured to allow incoming faxes, including the fax partner's URI and the name of the fax partner's server. The FaxServerURI parameter must use the following form: sip:< fax server URI>:< port>;< transport>, where "fax server URI" is either a fully qualified domain name (FQDN) or an IP address of the fax partner server. The "port" is the port on which the fax server listens for incoming fax calls and "transport" is the transport protocol that's used for the incoming fax (UDP, TCP, or Transport Layer Security (TLS)). For example, you might configure a UM mailbox policy to receive a fax as follows.

    Set-UMMailboxPolicy MyUMMailboxPolicy -AllowFax $true -FaxServerURI "sip:faxserver.abc.com:5060;transport=tcp"
    
  • 有关详细信息,请参阅设置传真服务器 URI 以允许发送传真的伙伴For details, see Set the partner fax server URI to allow faxing.

    小心

    尽管您可以通过分号分隔在格式中包含多个 FaxServerURI 条目,只有一个条目可以使用。这个参数仅允许使用一个条目,并且添加多个条目将使您无法平衡传真请求负载。Although you can include multiple entries in the format for the FaxServerURI by separating them with a semicolon, only one entry will be used. This parameter allows only one entry to be used, and adding multiple entries won't enable you to load balance fax requests.

  • 验证启用 UM 的邮箱是否可以接收传真邮件。默认情况下,所有与拨号计划关联的用户都能接收传真。但是,由于禁用了其邮箱接收传真的功能,可能会有用户无法接收传真的情况。有关如何使已启用 UM 的用户可以接收传真的详细信息,请参阅允许用户接收传真Verify that the mailbox that's UM-enabled can receive fax messages. By default, all users who are associated with a dial plan can receive faxes. However, there may be situations when a user can't receive faxes because the ability to receive faxes has been disabled on their mailbox. For more information about how to enable a UM-enabled user to receive faxes, see Enable a user to receive faxes.

    您可以阻止与拨号计划关联的单个用户接收传真邮件。要执行此操作,可使用命令行管理程序中的 Set-UMMailbox cmdlet 配置用户的属性。也可以使用 Set-UMMailbox cmdlet 阻止多个用户接收传真邮件。有关如何阻止一个或多个用户接收传真邮件的详细信息,请参阅 防止用户接收传真You can prevent an individual user who's associated with a dial plan from receiving fax messages. To do this, configure the properties for the user by using the Set-UMMailbox cmdlet in the Shell. You can also use the Set-UMMailboxPolicy cmdlet to prevent multiple users from receiving fax messages. For more information about how to prevent a user or users from receiving fax messages, see Prevent a user from receiving faxes.

步骤 4:配置身份验证Step 4: Configure authentication

除了配置您的 UM 拨号计划、UM 邮箱策略和启用 UM 的用户,您还需要在您的 Exchange 服务器和传真合作伙伴服务器上配置身份验证。Exchange 服务器必须能够验证声称来自传真合作伙伴服务器的邮件的来源。任何未经验证的声称来自传真合作伙伴服务器的邮件将不会被 Exchange 服务器处理。In addition to configuring your UM dial plans, UM mailbox policies, and UM-enabled users, you have to configure authentication between your Exchange servers and the fax partner server. The Exchange servers must be able to authenticate the origin of the messages that claim to be coming from the fax partner server. Any unauthenticated messages claiming to have come from a fax partner server won't be processed by an Exchange server.

要验证传真合作伙伴服务器与 Exchange 服务器的联系,您可以使用:To authenticate the connection from the fax partner server to the Exchange servers, you can use:

  • 相互 TLSMutual TLS

  • 发件人 ID 验证Sender ID validation

  • 专用的接收连接器A dedicated receive connector

一个接收连接器应该足以验证部署在您组织中的传真合作伙伴服务器。接收连接器将会确保 Exchange 服务器将所有来自传真合作伙伴服务器的通信视为已通过身份验证。A receive connector should be sufficient for authenticating the fax partner servers deployed in your organization. The receive connector will ensure that the Exchange servers treats all traffic coming from the fax partner server as authenticated.

接收连接器应在传真合作伙伴服务器用来提交 SMTP 传真邮件而使用的 Exchange 服务器上进行配置,而且必须为其配置以下值:The receive connector will be configured on an Exchange server that's used by the fax partner server to submit SMTP fax messages, and must be configured with the following values:

  • AuthMechanism: ExternalAuthoritativeAuthMechanism: ExternalAuthoritative

  • PermissionGroups: ExchangeServers PartnersFaxPermissionGroups: ExchangeServers, PartnersFax

  • RemoteIPRanges: {the fax server's IP address}RemoteIPRanges: {the fax server's IP address}

  • RequireTLS: FalseRequireTLS: False

  • EnableAuthGSSAPI: FalseEnableAuthGSSAPI: False

  • LiveCredentialEnabled: FalseLiveCredentialEnabled: False

有关详细信息,请参阅连接器For details, see Connectors.

如果传真合作伙伴服务器通过公共网络向 Exchange 服务器发送网络通信(例如,云中托管的基于服务的传真合作伙伴服务器),较好的方法是使用发件人 ID 检查对传真合作伙伴服务器进行身份验证。这种身份验证类型确保了发出传真邮件的 IP 地址得到授权,可以邮件声称来源的传真合作伙伴域的名义发送电子邮件。DNS 用来储存发件人 ID 记录(或发件人策略框架 (SPF) 记录),而且传真合作伙伴必须在 DNS 正向查找区域中发布他们的 SPF 记录。Exchange 将会通过查询 DNS 验证 IP 地址。而,发件者 ID 代理必须在邮箱服务器上运行,才能够执行 DNS 查询。If the fax partner server sends network traffic to an Exchange server over a public network, for example, a service-based fax partner server hosted in the cloud, it's a good idea to authenticate the fax partner server using a sender ID check. This type of authentication ensures that the IP address that the fax message came from is authorized to send email messages on behalf of the fax partner domain that the message claims to have come from. DNS is used to store the sender ID records (or sender policy framework (SPF) records) and fax partners must publish their SPF records in the DNS forward lookup zone. Exchange will validate the IP addresses by querying DNS. However, the sender ID agent must be running on a Mailbox server to be able to perform the DNS query.

您也可以使用 TLS 对网络通信进行加密,或使用相互 TLS 为传真合作伙伴服务器和 Exchange 服务器之间的通信进行加密和身份验证。You can also use TLS to encrypt the network traffic, or mutual TLS for encryption and authentication between the fax partner server and Exchange servers.