Verify the network configuration to prepare for Windows SBS 2008 migration

Updated: January 22, 2009

Applies To: Windows SBS 2008

Reconfigure your existing network

Before you can migrate your network to Windows SBS 2008, you must install and configure a router on your network, and then you must configure the Source Server to use one network adapter. When you are done, your network will look like Figure 1.

To configure the Source Server to use one network adapter

  1. Unplug the network adapter from the broadband connection.

Note

For more information, see the "Connect Computers on Your Network" section in "Planning Your Windows Small Business Server 2008 Network" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=104282).

  1. Install a router on your network as shown in Figure 1.

Note

For more information about installing a router, see the "Verify Your Router Setup" section in "Planning Your Windows Small Business Server 2008 Network" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=104282).

  1. To make sure that the Windows SBS 2008 installation wizard can find the router on your network, ensure that the IP address on the network adapter that is in the router and that connects to your LAN is set to either 192.168.x.1 or 192.168.x.254, where x is a number from 1 to 254. This IP address is the default gateway address for your network.

Note

For information about installing and configuring a router, see the documentation from your router manufacturer.

  1. On the Source Server, run the Configure E-mail and Internet Connection Wizard to configure the Source Server for one network adapter, as follows:

    1. Click Start, and then click Server Management.

    2. In the console pane, click To Do List.

    3. In the details pane, click Connect to the Internet.

    4. Complete the wizard.

  2. If you are using virtual private networking (VPN) on the Source Server, disable it. To disable VPN on the Source Server, run the Remote Access Wizard, as follows:

    1. Click Start, and then click Server Management.

    2. In the console pane, click Internet and E-mail.

    3. In the details pane, click Configure Remote Access.

    4. Complete the wizard, making sure that you click Disable remote access on the Remote Access Method page.

  3. If you have computers or devices that are configured with static IP addresses or DHCP reservations, you must manually update each of them with the new default gateway IP address.

The router is the gateway to the Internet. Because of this, either the router must provide a firewall service or you must add a firewall device to help protect your LAN from unauthorized access.

If your router supports the UPnPTM framework, the following are also true:

  • The installation wizard automatically configures the Internet connection on Windows SBS 2008.

  • The installation wizard configures port-forwarding exceptions on the router.

  • After Windows SBS 2008 is installed, the Windows SBS Console collects and displays information about your router on the Networking tab, in Internet Connection.

Using Internet Security and Acceleration Server 2004 during migration

You cannot directly migrate Microsoft Internet Security and Acceleration (ISA) Server 2004 from Windows SBS 2003 Premium Edition to Windows SBS 2008 Premium Edition. However, you can continue to use ISA Server 2004 on Windows SBS 2003 during the migration. Verify that ISA Server 2004 with Service Pack 3 (SP3) is installed and configured before you proceed. You can download ISA Server 2004 with SP3 from the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=104551).

After you install and configure ISA Server 2004 with SP3, configure remote procedure call (RPC) filtering.

To configure remote procedure call (RPC) filtering

  1. To open ISA Server Management, click Start, point to All Programs, point to Microsoft ISA Server, and then click ISA Server Management.

  2. In the ISA Server Management console tree, expand Microsoft Internet Security and Acceleration Server 2004, expand ServerName, and then click Firewall Policy.

  3. In the details pane, click the SBS Protected Networks Access Rule.

  4. On the Tasks tab, click Edit Selected Rule.

  5. On the Protocols tab (for an access rule), click Filtering, and then click Configure RPC protocol.

  6. On the Protocol tab, clear the Enforce strict RPC compliance check box, and then click Apply.

Note

When you clear the Enforce strict RPC compliance check box, DCOM traffic and other RPC protocols are allowed.

Note

When you publish an RPC interface where there is a route:network relationship between networks, port overriding is ignored. The publishing rule uses the original IP address or port.