DHCP server in win server 2003 step by step guide

http://technet.microsoft.com/en-us/library/cc778560%28WS.10%29.aspx Reservation: Gán IP và option xác định cho 1 host căn cứ vào MAC address. Thường dùng khi cần biệt đãi một host nào đó. Exclusion: Khoảng loại trừ (không cấp) trong một scope. Thường dùng khi muốn tránh xung đột với các server đã được gán static IP address. DHCP Reservation A DHCP reservation is a permanent IP address assignment. It is a specific IP address within a DHCP scope that is permanently reserved for leased use to a specific DHCP client. You can configure a DHCP reservation in your DHCP server when you need to reserve a permanent IP address assignment. Use reservations for the DHCP enabled devices like print and file servers or other application servers which always have the fixed IP address on network. A reservation is consists of the following information: Element Description Reservation name Name that the administrator assigns IP Address IP address from the scope for the client MAC Address Client's Media Access Control (MAC) address Description Description that the administrator assigns Supported DHCP reservation, Boot Protocol (BOOTP), or both Working with DHCP Reservations in the Microsoft DHCP Server Configuring a DHCP Reservation  Open the DHCP console.  In the console tree, click reservations.  On the action menu, click new reservation.  In the new reservation dialog box, provide the values for the following fields. o Reservation name. o IP address. o MAC address (without hyphens). o Description.  Under supported types, select one of the following options. o Both o DHCP only o BOOTP only  In the new reservations dialog box, click add, and then click close. Verifying the DHCP Reservation  On the client computer, at the command prompt, using the ipconfig/release command, release the client's IP address.  On the server computer, in the DHCP console, under address leases, verify that the reservation displays as inactive.  On the client computer, at command prompt, using the ipconfig/renew command, renew the client's IP address.  On the server computer, in the DHCP console, under address leases, verify that the reservation displays as active. DHCP in Windows Server 2003 D ynamic - Means that clients IP address may change H ost - Indicates that this is a system for clients, e.g. XP machines C onfiguration - A clue that you are in charge of the options, e.g. DNS Server P rotocol - The rules controlling the flow of packets between client and server Benefits of DHCP All clients and servers need an IP address on a TCP/IP network. How will you configure those dotty dot numbers on your TCP/IP property tabs? Manually, or automatically via DHCP? Let us investigate what advantages an automatic DHCP service has over the manual alternative.  DHCP needs much less effort - manual configuration is boring and labour intensive. Above all, DHCP options give a sense of central control.  Easy to update a default gateway or DNS server's IP address. Manual changes would be a nightmare, you would have to visit every machine.  No IP duplicate addresses. Provided you configure the DHCP scopes intelligently, there will never be another 'Duplicate IP address' problem to eat into your valuable time. Strategies for the clients and servers 10 years ago, when I first saw DHCP, I thought that you would need one DHCP server on each subnet - wrong. What I now recommend as a default, is two DHCP servers for the whole company. For those subnets without a DHCP you configure a DHCP Relay Agent. If you have two DHCP servers, then provide redundancy by splitting each scope so that each DHCP server gets a non-overlapping range. For example: Server A: 10.10.56.1 to 10.10.56.120 Server B: 10.10.56.121 to 10.10.56.254. Each scope has a class C Subnet Mask /24 (255.255.255.0) Strategies for the servers What are you going to do about the IP addresses for the servers themselves? * Configure static IP addresses, then EXCLUDE a range from the scope. * Select static IP addresses, but use a different range. * Choose DHCP configuration, even for file and print servers. (Except the DHCP server itself.) If you try the strategy of DHCP address for file and print servers, consider a RESERVATION for each server. Slowly I am warming to this DHCP idea, the killer advantage is that you can set DNS and Router options even for the servers. Let me elaborate, if you set server IP addresses manually, but then you change the default gateway, you may forget to change the servers default gateway. The result would be a loss of what ever service the servers were providing. However, if the servers have a reserved IP address then they come under the umbrella of your scope options and so there would be no extra work, and no loss of service. Summary DHCP is now a well established strategy for providing computers with IP addresses. However, it is full of surprises and hidden treasures, take the time to develop your DHCP tactics, then explore the properties of both the DHCP server icon and the scopes. I have a series of tutorials to help you. DHCP Troubleshooting It maybe famous last words, but DHCP does not give many problems. However if you are suffering from an APIPA address or a mis-configuration, then check out these symptoms and their associated cures. IPCONFIG will be your number one troubleshooting tool. Take the time to learn all its switches. For example IPCONFIG /all, /release /renew. DHCP Best Practices Updated: January 21, 2005 Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2 Best practices  Use the 80/20 design rule for balancing scope distribution of addresses where multiple DHCP servers are deployed to service the same scope. Using more than one DHCP server on the same subnet provides increased fault tolerance for servicing DHCP clients located on it. With two DHCP servers, if one server is unavailable, the other server can take its place and continue to lease new addresses or renew existing clients. A common practice when balancing a single network and scope range of addresses between two DHCP servers is to have 80 percent of the addresses distributed by one DHCP server and the remaining 20 percent provided by a second. For more information and an example of this concept, see Configuring scopes.  Use superscopes for multiple DHCP servers on each subnet in a LAN environment. When started, each DHCP client broadcasts a DHCP discover message (DHCPDISCOVER) to its local subnet to attempt to find a DHCP server. Because DHCP clients use broadcasts during their initial startup, you cannot predict which server will respond to the DHCP discover request of a client if more than one DHCP server is active on the same subnet. For example, if two DHCP servers service the same subnet and its clients, clients can be leased at either server. Actual leases distributed to clients can depend on which server responds first to any given client. Later, the server first selected by the client to obtain its lease might be unavailable when the client attempts to renew. If renewal fails, the client then delays trying to renew its lease until it enters the rebinding state. In this state, the client broadcasts to the subnet to locate a valid IP configuration and continue without interruption on the network. At this point, a different DHCP server might respond to the client request. If this occurs, the responding server might send a DHCP negative acknowledgement message (DHCPNAK) in reply. This can occur even if the original server that first leased the client is available on the network. To avoid these problems when using more than one DHCP server on the same subnet, use a new superscope configured similarly at all servers. The superscope should include all valid scopes for the subnet as member scopes. For configuring member scopes at each server, addresses must only be made available at one of the DHCP servers used on the subnet. For all other servers in the subnet, use exclusion ranges for the same scope ranges of addresses when configuring the corresponding scopes. For more information, see Using superscopes.  Deactivate scopes only when removing a scope permanently from service. Once you activate a scope, it should not be deactivated until you are ready to retire the scope and its included range of addresses from use on your network. Once a scope is deactivated, the DHCP server no longer accepts those scope addresses as valid addresses. This is only useful when the intention is to permanently retire a scope from use. Otherwise, deactivating a scope causes undesired DHCP negative acknowledgement messages (DHCPNAKs) to be sent to clients. If the intent is only to affect temporary deactivation of scope addresses, editing or modifying exclusion ranges in an active scope achieves the intended result without undesired results. For more information, see Manage Scopes.  Use server-side conflict detection on DHCP servers only when it is needed. Conflict detection can be used by either DHCP servers or clients to determine whether an IP address is already in use on the network before leasing or using the address. DHCP client computers running Windows 2000 or Windows XP that obtain an IP address use a gratuitous ARP request to perform client-based conflict detection before completing configuration and use of a server offered IP address. If the DHCP client detects a conflict, it will send a DHCP decline message (DHCPDECLINE) to the server. If your network includes legacy DHCP clients (clients running a version of Windows earlier than Windows 2000), you can use server-side conflict detection provided by the DHCP Server service under specific circumstances. For example, this feature might be useful during failure recovery when scopes are deleted and recreated. For more information, see DHCP Troubleshooting. By default, the DHCP service does not perform any conflict detection. To enable conflict detection, increase the number of ping attempts that the DHCP service performs for each address before leasing that address to a client. Note that for each additional conflict detection attempt that the DHCP service performs, additional seconds are added to the time needed to negotiate leases for DHCP clients. Typically, if DHCP server-side conflict detection is used, you should set the number of conflict detection attempts made by the server to use one or two pings at most. This provides the intended benefits of this feature without decreasing DHCP server performance. For more information, see Enable address conflict detection.  Reservations should be created on all DHCP servers that can potentially service the reserved client. You can use a client reservation to ensure that a DHCP client computer always receives the same IP address lease at startup. If you have more than one DHCP server reachable by a reserved client, add the reservation at each of your other DHCP servers. This allows the other DHCP servers to honor the client IP address reservation made for the reserved client. Although the client reservation is only acted upon by the DHCP server where the reserved address is part of the available address pool, you can create the same reservation on other DHCP servers that exclude this address. For more information, see Add a client reservation.  For server performance, note that DHCP is disk-intensive and purchase hardware with optimal disk performance characteristics. DHCP causes frequent and intensive activity on server hard disks. To provide the best performance, consider RAID solutions when purchasing hardware for your server computer that improves disk access time. When evaluating performance of your DHCP servers, you should evaluate DHCP as part of making a full performance evaluation of the entire server. By monitoring system hardware performance in the most demanding areas of utilization (CPU, memory, disk input/output), you obtain the best assessment of when a DHCP server is overloaded or in need of an upgrade. Note that the DHCP service includes several System Monitor counters that can be used to monitor service. For more information, see Monitoring DHCP server performance.  Keep audit logging enabled for use in troubleshooting. By default, the DHCP service enables audit logging of service-related events. Audit logging provides a long-term service monitoring tool that makes limited and safe use of server disk resources. For more information, see Audit logging. For more information on interpreting server audit log files, see Analyzing server log files.  Reduce lease times for DHCP clients that use Routing and Remote Access service for remote access. If Routing and Remote Access service is used on your network to support dial-up clients, you can adjust the lease time on scopes that service these clients to less than the default of eight days. One recommended way to support remote access clients in your scopes is to add and configure the built-in Microsoft vendor class provided for the purpose of client identification.  Increase the duration of scope leases for large, stable, fixed networks if available address space is plentiful. For small networks (for example, one physical LAN not using routers), the default lease duration of eight days is a typical period. For larger routed networks, consider increasing the length of scope leases to a longer period of time, such as 16-24 days. This can reduce DHCP-related network broadcast traffic, particularly if client computers generally remain in fixed locations and scope addresses are plentiful (at least 20 percent or more of the addresses are still available).  Integrate DHCP with other services, such as WINS and DNS. WINS and DNS can both be used for registering dynamic name-to-address mappings on your network. To provide name resolution services, you must plan for interoperability of DHCP with these services. Most network administrators implementing DHCP also plan a strategy for implementing DNS and WINS servers.  For routed networks, either use relay agents or set appropriate timers to prevent undesired forwarding and relay of BOOTP and DHCP message traffic. If you have multiple physical networks connected through routers, and you do not have a DHCP server on each network segment, the routers must be capable of relaying BOOTP and DHCP traffic. If you do not have such routers, you can set up the DHCP Relay Agent component on at least one server running Windows Server 2003 in each routed subnet. The relay agent relays DHCP and BOOTP message traffic between the DHCP-enabled clients on a local physical network and a remote DHCP server located on another physical network. When using relay agents, be sure to set the initial time delay in seconds that relay agents wait before relaying messages on to remote servers. For more information on DHCP relay agents, see DHCP/BOOTP Relay Agents.  Use the appropriate number of DHCP servers for the number of DHCP-enabled clients on your network. In a small LAN (for example, one physical subnet not using routers), a single DHCP server can serve all DHCP-enabled clients. For routed networks, the number of servers needed increases, depending on several factors, including the number of DHCP-enabled clients, the transmission speed between network segments, the speed of network links, whether DHCP service is used throughout your enterprise network or only on selected physical networks, and the IP address class of the network. For more information on determining how many DHCP servers to set up, see Planning DHCP networks.  For DNS dynamic updates performed by the DHCP service, use the default client preference settings. The Windows Server 2003 DHCP service can be configured to perform DNS dynamic updates for DHCP clients based on how clients request these updates to be done. This setting provides the best use of the DHCP service to perform dynamic updates on behalf of its clients as follows: o DHCP client computers running Windows 2000, Windows XP, or a Windows Server 2003 operating system explicitly request that the DHCP server only update pointer (PTR) resource records used in DNS for the reverse lookup and resolution of the client's IP address to its name. These clients update their address (A) resource records for themselves. o Clients running earlier versions of Windows cannot make an explicit request for DNS dynamic update protocol preference. For these clients, the DHCP service updates both the PTR and the A resource records when the service is configured to do so. For more information, see Using DNS servers with DHCP, Enable DNS dynamic updates for clients, and Configure DNS dynamic update credentials.  Use the manual backup and restore methods in the DHCP server console. Use the Backup command on the Action menu of the DHCP console to perform full backup of the DHCP service at an interval that protects you from significant data loss. When you use the manual backup method, all DHCP server data is included in the backup, including all scope information, log files, registry keys, and DHCP server configuration information (except DNS dynamic update credentials). Do not store these backups on the same hard drive upon which the DHCP service is installed, and make sure that the access control list (ACL) for the backup folder only contains the Administrators group and DHCP Administrator groups as members. In addition to performing manual backups, backup to other locations, such as a tape drive, and make sure unauthorized persons do not have access to your backup copies. You can use Windows Backup for this purpose. For more information, see Best practices for Backup. When restoring the DHCP service, use a backup created with the manual Backup command or a copy of the database created with synchronous backup by the DHCP service. In addition, use the Restore command on the Action menu in the DHCP console to restore a DHCP server. For more information, see Backing up the DHCP database and Restoring server data.  Follow the recommended process for moving a DHCP server database from old server computer hardware to new hardware. Moving a DHCP server database can be problematic. To manage moving the server database more easily, choose and follow a process tried and used by Microsoft Product Support Services such as the following: Manage Clients and Leases http://technet.microsoft.com/en-us/library/cc778560%28WS.10%29.aspx Manage Reservations and Reserved Clients http://technet.microsoft.com/en-us/library/cc758551%28WS.10%29.aspx Troubleshooting DHCP servers Updated: January 21, 2005 Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2 Troubleshooting DHCP servers What problem are you having?  The DHCP server is stopped.  The DHCP server is unable to provide service to clients.  One of two DHCP servers on the same subnet is not servicing clients.  The DHCP server appears to have suffered some data corruption or loss.  The server appears to be affected by another problem not described above. The DHCP server is stopped.  Cause: The DHCP server has not been authorized to operate on the network.  Solution: Authorize the DHCP server in the enterprise where it is being used.  See also: Authorizing DHCP servers; Authorize a DHCP server in Active Directory; Delegate ability to authorize DHCP servers to a non-enterprise administrator  Cause: Configuration details might be incorrect or missing at the server.  Solution: If you have just completed setting up or administering the DHCP server, you might want to review the provided checklist to see if you have missed a crucial step in the installation process. To help prevent the most common types of problems, review DHCP best practices for tips on deploying and managing your servers. Because many DHCP failures are first detected as client-side errors, you might want to start by investigating the problem there.  See also: Checklist: Installing a DHCP server; DHCP Best Practices; Troubleshooting DHCP clients  Cause: The DHCP server has been stopped.  Solution: Check the system event log and DHCP server audit log files for details. When the DHCP Server service either stops or cannot start, useful explanatory information about the source of the service failure or shutdown can generally be found in these logs.  See also: Audit logging; Analyzing server log files; Using the Event Viewer snap-in; Search for specific events The DHCP server is unable to provide service to clients.  Cause: The server is a multihomed computer and is not providing service on one or more of its network connections.  Solution: Review Windows Server 2003 DHCP binding defaults for network connections based on whether you have elected to either statically or dynamically configure TCP/IP for any or all [...]... connected to the Internet, the latest updates for the Windows Server 2003 family are available at the Microsoft Web site  See also: DHCP updated technical information; DHCP; Using the Windows Deployment and Resource Kits; Microsoft Web site Install and Configure DHCP Server in Win server 2003 Step By Step Guide A DHCP Server assigns IP addresses to client computers This is very often used in enterprise... are stored in a database that resides on a server machine Installing DHCP Server is very easy in win server 2003 First you need to go to Start–>All Programs–>Administrative Tools–>Manage Your Server Here you need to select Add or remove a role Verify the following steps click on Next Select Server Role as DHCP Server option click on Next Summary selection click on Next Installing DHCP Server in progress... Resource Kits; Microsoft Web site Troubleshooting DHCP clients Updated: January 21, 2005 Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2 Troubleshooting DHCP clients What problem are you having?  The DHCP client does not have an IP address configured or indicates that its IP address is 0.0.0.0  The DHCP client appears to have automatically... activate this scope now and click next DHCP Server new scope installation was finished and click finish Now your server is now a DHCP server message and click finish Configuring DHCP Now you need to go to Start—>Administrative Tools— >DHCP Right Click on your server click on Authorize your DHCP Server Authorization completed now your DHCP server is up and running DHCP servers permit you to reserve an IP... address and description - choose whether you want to support DHCP or BOOTP and press add The new reservation will be added to the list That’s it it is very easy to configure DHCP server in win server 2003 now you can configure your windows client pc to check your dhcp server is working or not If you want to install and configure win server 2003 domain controller with DNS setup check here ... full and correct set of DHCP options assigned but its network configuration does not appear to be working correctly If the DHCP server is configured with an incorrect DHCP router option (option code 3) for the default gateway address of the client, clients running Windows NT, Windows 2000, or Windows XP use the correct address However, DHCP clients running Windows 95 use the incorrect address  Solution:... BOOTP /DHCP Relay Agent on the client subnet (that is, the same physical network segment) The relay agent can be located on the router itself, on a computer running Windows NT Server and the DHCP Relay Agent component, on a computer running Windows 2000 Server with the Routing and Remote Access service enabled and configured as a DHCP Relay Agent, or on a computer running a Windows Server 2003 operating... Agents; BOOTP and DHCP  Cause: Multiple DHCP servers exist on the same local area network (LAN)  Solution: Make sure that you do not configure multiple DHCP servers on the same LAN with overlapping scopes You might want to rule out the possibility that one of the DHCP servers in question is a computer running Small Business Server On a computer running Small Business Server, the DHCP Server service... for updated technical information that might relate to the problem you have observed You can obtain information and instructions that pertain to your current problem or issue If you have connection to the Internet, the latest updates for members of the Windows Server 2003 family are available at the Microsoft Web site  See also: DHCP updated technical information; DHCP; Using the Windows Deployment and... DHCP client The DHCP client appears to have automatically assigned itself an IP address that is incorrect for the current network  Cause: The client running Windows 98, Windows Millennium Edition, or Windows XP could not find a DHCP server and has used IP autoconfiguration to configure its IP address In some larger networks, disabling IP autoconfiguration might be desirable for network administration . Troubleshooting DHCP servers Updated: January 21, 2005 Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2 Troubleshooting DHCP servers. /release /renew. DHCP Best Practices Updated: January 21, 2005 Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2 Best. To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2 Troubleshooting DHCP clients What problem are you having?  The DHCP client does