Please critique my plan to upgrade our Exch 2003 server to 2010.
I want to start by setting up a test domain using an old Win Svr 2003 DC, and another old win 2003 server as an Exch 2003 mail server.
This test domain will be connected to our existing LAN so I need to make sure it doesn’t cause any problems.
We are a small single domain shop with a public domain name that I will call “mycompany.net” for the purposes of this question.
Our DC’s are named: “dc05.main.mycompany.net”, “dc06.main.mycompany.net”
Mail server: “mail1.main.mycompany.net”
Public DNS for our domain has an MX record that points to a public IP we use for our Sonicwall spam filter. The firewall has a 1 to 1 NAT entry to route that public IP to the LAN IP of the spam filter with corresponding rule that allows smtp to that LAN IP.
The spam filter routes good mail to the Exch Svr, and the Exch Svr uses the spam filter as a smart host for outgoing mail.
Another public DNS entry points “smtp.mycompany.net” to our firewall which 1 to 1 NAT’s that public IP to another LAN IP of our Exch Svr (we have 2 IP’s assigned to this server). This is used for OWA, ActiveSync etc. to the Exch Svr.
Test Domain Setup
I plan to name the test domain “test.mycompany.net”.
DC = “dc01.test.mycompany.net”
Mail = “mail.test.mycompany.net”
Public DNS MX record for “test.mycompany.net” to point to a currently unused public IP we have available.
MX record for “test.mycompany.net” will point to public IP x.x.x.10
Firewall will NAT that public IP to the LAN IP x.x.x.30, and allow smtp on that IP to route to the sonicwall spam filter.
The spam filter will have in incoming mail path setup that routes mail with source IP x.x.x.30 to the test mail server.
Outgoing mail configuration on the test mail server will be the same as the “main” exch svr I guess.
Once the test domain seems to be working:
I will obtain an SSL certificate (we are not using SSL now) and apply it to the test mail server, so I can figure out how that works.
Then I will add a new Win Svr 2008 R2, Exch Svr 2010 machine to the test domain and go thru the procedure of migrating to it.
Once I feel like I know what I am doing I will plan the migration of the “main” domain mail server.
Primary concern is to not allow this testing to disrupt the operation of our currrent systems.
I know this is a lot to ask, but I’m hoping some of you guys just love this stuff so much you will enjoy thinking about it and helping me with any constructive suggestions.
Thank you.