A long overdue feature in Windows Server 2012 is the ability to have a truly distributed DHCP infrastructure. You used to have to use the 80/20 split scope configuration which was at best administratively burdensome, and at worst unmanageable for a large enterprise. Alternatively, you’d have to run a Windows cluster for DHCP – who actually wants to do that? Windows Server 2012 now offers distributed DHCP failover.
I’ll start by talking about migrating your DHCP configuration from Windows 2008 to Windows 2012. First, you obviously have to install Windows 2012 and add the DHCP role. Microsoft has made it ridiculously easy to export and import the configuration with PowerShell – you can complete the process with 2 commands.
Open a PowerShell window on your 2012 server and run
Export-DhcpServer -ComputerName your2008DHCPserver.foo.com -Leases -File C:\path\to\exportfilename.xml -verbose
Exporting Windows 2008 DHCP configuration
A bit of advice from my lab environment – if you have a clock mismatch between domain controllers, you won’t be able to run these remote Powershell commands. If you’re getting strange errors in your lab, check the clocks on your DCs. My 2012 DC was many hours behind my 2008 DC and I couldn’t run any commands. I fixed the clock and the problem disappeared.
When your export is complete, run the import.
Import-Dhcpserver -Leases -File C:\path\to\exportfilename.xml -BackupPath C:\windows\temp\ -verbose
Importing DHCP configuration from a Windows 2008 export
Import of 2008 DHCP configuration completed.
The 2008 imported scopes on the 2012 DHCP server.
Moving on to configuring the failover –
Configuring failover on a DHCP scope
Not much to see here, but if you don’t have any scopes visible you aren’t going to be able to go much farther. One possible solution to the problem is in this post.
First screen of the failover wizard
Specify another Windows 2012 server with the DHCP role already installed.
Specifying a failover partner in the failover wizard
The failover relationship must be named. Maximum client lead time refers to amount of time the surviving DHCP host will wait before assuming complete control over the scopes. For mode, you can pick either load balanced or hot standby – basically an active-active or active-passive relationship.
Defining the failover relationship
Finish will kick off the process.
Last screen of the failover wizard
Failover progresses to completion
The scope and leases are now visible from the secondary DHCP server.
The failover scope as seen on the secondary DHCP server
I will now shut down the primary DHCP host and leave the secondary host online. You can see my Linux guest with the DHCP address of 192.168.237.201. After shutting down primary DHCP, I reboot this Linux guest.
Client IP prior to reboot
The guest comes back with the same .201 IP address, this time served by the secondary DHCP host.
Client IP after reboot – DHCP served by failover host.
Now I boot a second Linux guest and it draws a .220 IP address from the secondary DHCP host.
A second client VM booted with primary DHCP server disabled
Here are the leases as seen from the secondary DHCP host. Both of the Linux hostnames are the same because I didn’t bother customizing them in the guest. However, the MAC addresses are different and each VM is drawing the correct IP.
DHCP leases on failover host
I now bring the primary DHCP host back up. Immediately after boot, you can see that the lease for the .220 IP is not listed.
DHCP leases on DC2 after powerup
We could wait for the hosts to do this themselves, but we’re impatient and force a replication.
Forcing scope replication to pull leases from failover host
Now the .220 lease is visible from the primary host.
DHCP leases on primary host
Now we take down the secondary DHCP host, leaving only the primary online. Reboot both of the Linux guests and they both correctly draw the .201 and .220 IP address.
DHCP IP on client 1 after reboot
DHCP IP on client 2 after reboot
Once you have this set up you can configure your network infrastructure with multiple DHCP addresses. Vendors have various names, but Cisco refers to this as the ip helper address. DHCP requests will always be sent to both DHCP hosts, but each scope is active on one host at a time. One DHCP request will be acknowledged and the other will be ignored.