Shulou(Shulou.com)06/03 Report--

Recently, we have done a cross-forest DHCP migration. There are two existing forests (domains) in the environment. Forward.com and guitar.cn do domain integration, and now we need to migrate DHCP data. Record the migration process through the experimental environment and consult it later.

Background introduction:

1. Existing forest Windows Server 2008R2 environment, domain name forward.com,08DC.forward.com IP address: 192.168.3.2, mask: 255.255.255.0, gateway: 192.168.3.1

2. Xinlin Windows Server 2012R2 environment, domain name guitar.cn,TestDC.guitar.cn IP address: 192.168.2.2, mask: 255.255.255.0, gateway: 192.168.2.1

3. There is an existing DHCP server on forward.com, so you want to migrate the existing DHCP scope to Xinlin guitar.cn. The AD,DNS,DHCP role is installed on both 08dc and TestDC in the lab environment.

Implementation step 1. Forest Trust

When it comes to the DHCP migration between different forests, we first need to do the two-way forest trust between the two forests to prepare for the subsequent DHCP migration.

Create forest trust prerequisites:

Note: 1. First, make sure that the login account in the two domains has enterprise admins administrator privileges

two。 Make sure that the networks of the two domains are connected.

1. Create a new auxiliary area

1) on the guitar.cn domain control (DNS) server, right-click DNS- to find the zone guitar.cn attribute, select zone transfer, and add the domain control IP address of forward.com to the list of allowed transfers

2) right-click the forward search zone-create a new zone

3) New Zone Wizard-New Auxiliary Zone

4) enter forward.com for the region name

5) the primary DNS server in the secondary zone, enter the IP address of forward.com domain control / DNS server

6) complete the creation of the auxiliary area

7) similarly, create a new guitar.cn secondary zone on the forward.com DNS server

Note: an error may occur as follows:

Restart the DNS service to solve this problem

8) on the guitar.cn domain control, open the AD domain and trust relationship-New Trust

9) New Trust Wizard, enter the name of the trusted domain forward.com

10), forest trust-two-way trust

11), create a trust for the guitar.cn and uplod.com domains

12), enter the password for the domain administrator account

13), incoming, outgoing authentication

14), check the trust relationship on guitar.cn and forward.com

15) find the user / computer information of the other domain on the guitar.cn and forward.com users and computers, respectively. If the user / computer information can be queried, the domain trust relationship is established successfully.

2. Create conditional transponder

1) create a conditional forwarder on the guitar.cn DNS server to forward the domain name resolution of forward.com to the 192.168.3.2 domain control / DNS server

2. Similarly, create a conditional forwarder on the forward.com DNS server to forward the domain name resolution of guitar.cn to the 192.168.2.2 domain control / DNS server

3. Follow the steps in step 1 to create a two-way trust between the two forests.

II. DHCP data migration

The DHCP server already exists in the original forward.com and is working properly, so the DHCP data is now migrated to the DHCP server in the DHCP domain.

1) install the DHCP role on the guitar.cn Windows Server 2012R2 server

2) after the installation is completed, there will be a warning in the server manager prompting you to complete the subsequent configuration of DHCP. Ignore this step first. Configure after the DHCP migration is complete.

3), run windows powershell on windows server 2012R2 (12)

4) run the command import-module DHCPserver to import the DHCP module

5) run the command export-DHCPServer-ComputerName 08dc.forward.com-leases-File C:\ ForwardDHCP\ ForwardDHCP.xml-Verbose to export the data on the 08dc.forward.com DHCP server to the C:\ ForwardDHCP folder of the Testdc.guitar.cn DHCP server

Note: the following errors may occur:

After analysis and investigation, it is found that the permission problem is the cause. The administrator account in this domain can be added to the administrators group in the other domain.

6) at this time, the DHCP xml file in the allowed domain has been generated in the C:\ ForwardDHCP folder of the Testdc.guitar.cn DHCP server

7) Import the DHCP data into the Testdc.guitar.cn server, enter the command: Import-DHCPServer-ComputerName testdc.guitar.cn-File C:\ ForwardDHCP\ ForwardDHCP.xml-Verbose-BackupPath C:\ 12dhcpbak (this command imports the DHCP data and backs up the DHCP data on the original server)

8) see that the DHCP data has been imported successfully

9) after domain consolidation, if only one DHCP server is used to distribute the IP address in the production environment, the DHCP server in the original 08dc.forward.com can be de-authorized and the testdc.guitar.cn DHCP server can be authorized

10) View the usage status of IPv4,IPv6 on the testdc.guitar.cn DHCP server, and modify the DHCP server configuration options as needed

11), client test to check whether the DHCP server is switched to testdc.guitar.cn and whether other server configuration options are correct

12) complete the server option configuration on the testdc.guitar.cn DHCP server

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.