Capstone Project 2015

Upgrade network services for a company. Availability, performance, and security are the importance project drivers. The existing network needs to be upgraded without interruption, all data and users info must be preserved.

ExistingNetwork

Existing services:

  1. Exchange Server 2010
  2. Windows Server 2008 AD domain
  3. Oracle database Server
  4. Apache website running Drupal on CentOS


Requirement:

  1. Upgrade Windows Server 2008 to Windows Server 2012 R2
  2. Mail Server Exchange 2013
  3. Drupal on IIS
  4. Voice Sever
  5. Oracle to Oracle Express
  6. Remote Access
  7. Internal and External DNS services
  8. Redundancy
  9. Automated Deployment
  10. Perimeter Security

UpgradedNetwork

Processing Steps:

  1. Upgrade two Windows Server 2008 to Windows Server 2012 R2
    • Using powershell command to export and import user accounts in Active Directory to csv file
    • Active Directory Replication both DC for redundancy
    • Setup External and Internal DNS Server on both DC and replication
      • Add A records and PTR records, forwarder: pfSense, DC1, DC2, FreePBX, Exchange Server.
    • Install VPN Server on DC1 using L2TP/IPSec
      • Setup preshare key
      • Setup address pool for remote access 192.168.0.200-192.168.0.229/24
      • Configure Network Policy Server, create VPN group and allow users access remotely
  1. Install Web Server IIS 8.5, MySQL, PHP 5.5
    • Install feature CGI in Web Service IIS
    • Modified php.ini to work with IIS
    • Export database Drupal from Linux Box and import to MySQL workbench
    • Install Drupal 6.34
  2. Install Exchange Server on DC2
    • Install .Net framework 4.5 and feature, modules, mailbox DB.
    • Test send mail using OWA (Outlook Web Access)
  3. Setup Voice Server using FreePBX
    • Create extensions, conference number
    • Using Zoiper app installed on pc and cellphone, add extension to each client
  4. Migrate Oracle DB from Linux Box to Oracle Express on Windows Server
  5. Automated deployment
    • Install Acronis Snap Deploy 5
    • Create PXE Server
  6. PfSense firewall
    • Allow inbound and outbound traffic, port forwarding
    • Allow port 53, 80, 443, 5060, 5004, GRE, 1701, 4500, 500