Exchange 2013 Setup Need some clarification

Ok so before I ask my questions, I'm going to briefly list how I've got things setup.

I've got 3 servers, all running MS Windows Server 2012 R2 Standard

2 of those servers, lets call them MAIL01 and MAIL02 have Exchange 2013 installed. Both the Mailbox and Client Access roles.

The other server is just the File Share Witness

I've created a DAG and have made MAIL01 and MAIL02 members of the DAG

I have a mailbox database on MAIL01 that I added a copy for on MAIL02

Lets assume I've got the following IP addresses on these

MAIL01 - 1.1.1.1
MAIL02 - 1.1.1.2
DAG - 1.1.1.3

I also have a Barracuda spam device setup lets assume IP 1.1.1.4

I am fully aware of how DAG and maintaining QUORUM works.

I am aware that DAG does not provide high availability to the CAS servers.

What I've done is on my domain controller in DNS, I've added 2 A host entries for mail.company.com pointing to 1.1.1.1 and 1.1.1.2. I implemented this because I don't have a hardware load balancer.

I have static NAT setup on my router for the following ports: 80, 110, 143, 443, 587, 993, 995. These all go to IP 1.1.1.3
I have 2 more ports, 25 and 465 which go to 1.1.1.4 which is the Barracuda. In the Barracuda config, I have it routing all e-mails to 1.1.1.3 which is the DAG.

I have a few questions based on this setup.

1. Is this properly setup for high availability?
2. I'm assuming that in order to provide the same kind of round robin DNS for the CAS server from the outside as I have from the inside, I'd need to have a public IP for each of the CAS servers and add both of those to my external DNS servers. If I do this, which ports would I need to setup static NAT for on my router?
3. Yesterday we had a short power outage which caused MAIL02 to go down. Once this happened, the database on MAIL01 was in a dismounted state and I was unable to mount it again. Things wouldn't start working again until MAIL02 was back online.

Basically what I'm trying to achieve is the following:

Have a single domain mail.company.com
Have multiple exchange servers for high availability so that if one were to go down, the other would still be available.
Continue to be able to use my Barracuda and have it route mails to a single IP address.

Any help with this would be much appreciated.
Chris FletcherAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Adam BrownSr Solutions ArchitectCommented:
Round Robin DNS isn't necessarily the best solution for handling HA in Exchange, since it isn't app-aware. If one of the exchange servers has issues, it'll cause some clients to be unable to connect properly. The best way to handle Exchange HA is to use a load balancer, but in the absence of that, just configure your mail.domain.com address to point to one of the exchange servers and change the record to point to the other if the primary server fails, then re-point the NAT config on the firewall to go to the good server. If you have mailboxes on both servers, the primary server's CAS role will proxy connections to both mailbox roles without any issues, so you don't need to provide users access to the secondary CAS role.

Regarding your power outage, was the File Share Witness still accessible from MAIL01 during the time MAIL02 was offline? If MAIL01 loses connectivity with both other nodes it will force dismount.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Chris FletcherAuthor Commented:
Understood. Is there any particular load balancer you could recommend. The boss is pretty particular about wanting to have HA without having to make manual changes.

The other part that I'm confused about is how to go about setting up the Barracuda appliance.

The router is forwarding ports 25 and 465 to the Barracuda.

The Barracuda can only route mail to a single IP address.

I am currently routing it to the DAG IP address, this seems to work. Is this the proper way to do it or should I be using a load balancer?


The File Share Witness was still accessible during the outage.
0
Adam BrownSr Solutions ArchitectCommented:
The DAG IP isn't supposed to be used for anything, really. If you get a load balancer, you can configure it to balance SMTP traffic as well. Kemp balancers are pretty good and relatively inexpensive, and have templates for Exchange 2013.
0
Delphineous SilverwingGood Ol' GeekCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Split:
-- Adam Brown (https:#a42073626)
-- Adam Brown (https:#a42073733)


If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

Delphineous
Experts-Exchange Cleanup Volunteer
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.